Hi, Freemake are saying their business version (hxxp://www.freemake com/download?id=FreemakeVideoConverterBusiness.exe) of their video converter contains no adware but Norton flags it as having adware. I asked Freemake about this and they said they've contacted Norton and Norton as promised to exclude the business version from detection. So I'm confused, is the business version safe or not? Thanks Ninko
bjm_: Curious, does the checksum from "In relation to submission 28733 [..]" match >File: FreemakeVideoConverterBusiness_4.2.0.6.exe
File size: 28.3 MB (29,677,888 bytes)
MD5 checksum: EB36234D401684[..]
SHA256 checksum: 0628AFF9F7F22A3 [..]
correction: with "detection cannot be revoked" response = no checksum info
In relation to submission 29844.
Upon further analysis and investigation we have determined that the file(s) in question meet the necessary criteria to be detected by our products and as such, the detection cannot be revoked.
For additional information on how to configure Symantec products to exclude specific drives, folders, and files from being scanned please see below.
Symantec Enterprise
- Information on exclusions: https://support.symantec.com/en_US/article.HOWTO80917.html
- Support: https://www.symantec.com/business/support/index?page=home
Norton Consumer
- Information on real time exclusions can be found under the section 'Exclude files or folders from scan': https://support.norton.com/sp/en/us/norton-antivirus/19.0/solutions/kb20100222230832EN_EndUserProfile_en_us
- Support: https://www.symantec.com/norton/support/index.jsp
Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.
Sincerely,
Symantec Security Response
Curious, does the checksum from "In relation to submission 28733 [..]" match >
File: FreemakeVideoConverterBusiness_4.2.0.6.exe
File size: 28.3 MB (29,677,888 bytes)
MD5 checksum: EB36234D401684EE108613EF4F329828
SHA256 checksum: 0628AFF9F7F22A3DCBDB0A62D60071F698AA042BB07E43BEBB6F931FE1CFB96D
FWIW ~ response from Symantec that I've received included >
If detection persists, please contact support:
* Norton: https://support.norton.com/sp/en/us/home/current/info
* SEP: https://support.symantec.com/en_US/endpoint-protection.54619.html
Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.
If you are a software vendor and would like to upload your software for proactive whitelisting, please complete one of the following forms:
* If you are BCS customer: https://submit.symantec.com/whitelist/bcs
* Otherwise: https://submit.symantec.com/whitelist
For more information on best practices to reduce false positives:
http://www.symantec.com/content/en/us/enterprise/white_papers/b-to_increase_downloads-instill_trust_first_WP.en-us.pdf
Maybe, re-submit False Positive submission form, with url link to this thread.
Maybe, reach out to Freemake again.
Maybe, run your paid for Freemake program.
Respectfully, what a user does regarding a Norton detection...is up to the user.
https://support.norton.com/sp/en/us/home/current/solutions/v6200368
https://support.norton.com/sp/en/us/home/current/solutions/v80629965
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832
https://support.norton.com/sp/en/us/home/current/solutions/v54298598
I have contacted Freemake about it and they said,
“we’ve already contacted Norton and they have promised to excluded Freemake Business from potentially harmful asap.”
But that’s not what Norton said when I submitted the file as a false positive,
"In relation to submission 28733.
Upon further analysis and investigation we have determined that the file(s) in question meet the necessary criteria to be detected by our products and as such, the detection cannot be revoked."
Ninko: I bought the business version because they said it contains no adware and so wouldn't be picked up by Norton, I downloaded the business version from the link they gave me, the link in my first post.
> did you ask Freemake to submit file for whitelisting
https://submit.symantec.com/whitelist/
FWIW ~ https://virusscan.jotti.org/en-US/filescanjob/juzhsi5x8a
FWIW ~ https://www.metadefender.com/#!/results/file/ZTE3MDQxMHJrZEh1alhZNnhISnRyX2ptRjZn/regular/analysis
FWIW ~ FreemakeVideoConverterBusiness_4.2.0.6.exe that I downloaded from your link (first post) does not have the Optional Offer that FreemakeVideoConverterFull.exe includes that I downloaded from freemake.com/downloads/. YMMV
I bought the business version because they said it contains no adware and so wouldn’t be picked up by Norton, I downloaded the business version from the link they gave me, the link in my first post.
FWIW ~ opening post link
File name: FreemakeVideoConverterBusiness_4.2.0.6.exe
Detection ratio: 4 / 62
Analysis date: 2017-04-29
File: FreemakeVideoConverterBusiness_4.2.0.6.exe
File size: 28.3 MB (29,677,888 bytes)
SHA256 checksum: 0628AFF9F7F22A3DCBDB0A62D60071F698AA042BB07E43BEBB6F931FE1CFB96D
and FWIW ~ freemake.com/downloads/ link
File name: FVC005.exe
Detection ratio: 2 / 62
Analysis date: 2017-04-28
File: FreemakeVideoConverterFull.exe
File size: 33.1 MB (34,656,256 bytes)
SHA256 checksum: F30ED14E53D95CFC1BEB7742E97DA48AEA78AC48424B3EE42958E7583579C56A
YMMV
If I look at the web link you gave, hxxp://www.freemake.com/downloads/ the downloads are listed as freeware. The free versions are probably ad supported, and that is probably what is being detected by Norton. Is that where you are downloading from, or did you first purchase the product from hxxp://www.freemake.com/business/, and then download the product?
I clicked on the link for downloading the freemake video converter from your original link, and Norton popped up warning of a PUP in a temp file, and this was even before I actually downloaded anything. And from the support page....
What is the toolbar for?
The toolbar integrated within Freemake software is an optional browser addon that gives users an instant access to popular web destinations and services. The next toolbar version will also serve as a basis for new Freemake applications. We offer to install the toolbar because it brings us rewards to maintain project and develop new software.
So this is the PUP that is being detected.
Ninko: I've already done that, and Norton stands by it's decision, so I'm confused who's telling the truth.
https://community.norton.com/en/comment/7435741#comment-7435741
I’ve already done that, and Norton stands by it’s decision, so I’m confused who’s telling the truth.
Ninko
Please review > How to report false positives
But it is being flagged by Norton, hence the confusion.
Ninko
Why Can’t You Simply Make a Paid Version Without Ads?
There is available a paid version of Freemake Video Converter. Freemake Video Converter Business version doesn’t include any kind of ads, and thus is not flagged and blocked by the AV software and firewall. It includes Gold Pack and Subtitles Pack options. With the business version, you can do all the same things as with a free one: convert videos between formats, burn and rip DVD and Blu-Ray, download online videos, cut, join and rotate videos, reduce video size, and much more.
http://www.freemake.com/blog/is-freemake-video-converter-safe-the-truth-is-finally-revealed/
Please review > How to report false positives