Freemake Video COnverter Blocked

Norton Security | Norton Internet Security
21
Victoria from Freemake:

Hi Norton Community,

This is Victoria from Freemake. As of July 2017, Norton doesn't block Freemake Video Converter anymore.

Freemake Video Converter doesn't have any unwanted programs (PUP) in the installer. There are NO toolbars, browser add-ons, extenstion, OpenCandy or any other third-party extra stuff.

Freemake Video Converter is safe and clean. Please download the latest version of Freemake software only from official site www.freemake.com. Please make sure your Norton virus database is up-to-date.

It appears that the main download link is just a downloader stub... Why not just link directly to the real download?

It seems you just released a new version on the 23rd. You will want to submit a false positive report to Symantec/Norton.

Also, what is the purpose of this in your program:

netsh.exe http add urlacl url=http://+:11425/ user=everyone

22

Filename: freemakevideoconvertersetup.exe
Threat name: Trojan.Gen.2Full Path: c:\users\movie_000\desktop\freemakevideoconvertersetup.exe

____________________________

____________________________


On computers as of 
8/25/2017 at 8:29:23 PM

Last Used 
8/25/2017 at 8:31:21 PM

Startup Item 
No

Launched 
No

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


freemakevideoconvertersetup.exe Threat name: Trojan.Gen.2
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


download[dot]freemake[dot]net/FreemakeOriginals2/EP/FreemakeVideoConverterSetup.exe
Downloaded File  from freemake.net
Source: External Media

freemakevideoconvertersetup.exe

____________________________

File Actions

Infected file: c:\users\movie_000\desktop\ freemakevideoconvertersetup.exe Access Denied
____________________________


File Thumbprint - SHA:
9148bb1cb5b74a9a7b74c5ccb431c32f9444956c0d26f63357f7846a0739037e
File Thumbprint - MD5:
faf577d499a1609b37755ea62e6c617c
 

23

For information re event > from Norton pop-up > View Details > Copy to Clipboard > paste &or from Norton history > More Options > Copy to Clipboard > paste.

Report a Suspected Erroneous Detection (False Positive)
https://submit.symantec.com/false_positive/

For second opinion choose File &or Search hash at VirusTotal

File name: FreemakeVideoConverterSetup.exe
Detection ratio: 14 / 65
Analysis date: 2017-08-26

24

Still blocked on my machine

Norton not only blocks it - it removes it from my machine.

not even in deleted items - see norton popup in lower right hand corner of attachement

25

Hi Norton Community,

This is Victoria from Freemake. As of July 2017, Norton doesn't block Freemake Video Converter anymore.

Freemake Video Converter doesn't have any unwanted programs (PUP) in the installer. There are NO toolbars, browser add-ons, extenstion, OpenCandy or any other third-party extra stuff.

Freemake Video Converter is safe and clean. Please download the latest version of Freemake software only from official site www.freemake.com. Please make sure your Norton virus database is up-to-date.

26

FWIW ~ file from Freemake article Permalink

File: FreemakeVideoConverterFull.exe
File size: 32.9 MB (34,479,040 bytes)
MD5 checksum: DD93FE44392DBE97A52D4345BB3A8756
SHA256 checksum: 820B45C8AF677E01D3FB34A4785E66A6E7F029422B7C2AFF282C06D46CDA7DA5

File name: FreemakeVideoConverterFull.exe
Detection ratio: 14 / 58
Analysis date: 2017-04-18

YMMV

27

I followed bjm_'s advice. Here is a link to Freemake's solution to the problem. Let's hope that it works!

 

http://support.freemake.com/hc/en-us/articles/115001849743-Norton-blocks-Freemake-software-How-can-I-install-update-it-

 

Well, I've tried it, installed Freemake Video Converter (being very careful about PUPs etc.) and it works. I will report back if I have any problems.

28

Some good, helpful ideas here, bjm_. I will try a couple of these to see what happens.

29

What users do regarding Norton detection...is up to users.
Have you contacted vendor regarding software proactive whitelist
https://submit.symantec.com/whitelist/

Have you tried to Exclude from Auto-Protect
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832

If no joy.....have you tried to Exclude by Signature
https://www.symantec.com/security_response/writeup.jsp?docid=2017-040616-1325-99

https://support.norton.com/sp/en/us/home/current/solutions/v54298598

Have you tried >> How to report false positives

Have you tried >>> http://support.freemake.com/hc/en-us/requests/new

http://www.freemake.com/support/

http://www.freemake.com/eula_fvc/
http://www.freemake.com/privacy_policy/
http://www.freemake.com/usage_statistics_info/

Ad-Supported: Advertising supported or third party (additional) software included. 
by my read....  FVC derives revenue thru ads, by monetizing users.

*Items rated as a PUP - which does not mean malware. A PUP can download and install other software that might turn out to be, indeed, malicious. However, security soft vendors do not install every piece of software and watch every single thing that the software does and then create a signature for it. That isn't how file signatures are created. If vendors had to do all that, then it would take a very long time to create signatures, it would be very expensive, and security soft vendors would never tolerate it.

*A PUP can be installed at the user's discretion. The signature detection is just to bring the file to the user's attention.

*What some users consider a PUP, other users will not; what one AV company rates as a PUP, another will not.

*In general, be more vigilant and discerning. PUPs in particular usually install with your consent, and your consent can often be implied when you take shortcuts like a default installation, fail to read all the installation options presented, fail to read Terms & EULA. (*google)

30

Very annoying. What can we do to get the use of this program back (safely)?

31

https://safeweb.norton.com/report/show?url=download.freemake.net

FWIW ~ majorgeeks.com/files/details/freemake_video_converter
Freemake Video Converter 4.1.9.83 License: Ad-Supported

File: FreemakeVideoConverterFull.exe  (majorgeeks.com)
File size: 32.8 MB (34,371,576 bytes)
SHA256 checksum: 7CA581087F91609

File: FreemakeVideoConverterFull.exe  (freemake.com)
File size: 33.1 MB (34,656,256 bytes)
SHA256 checksum: F30ED14E53D95C

YMMV

32

Same here, I noticed that Freemake was missing from my desktop and then couldn't find it listed in my programs.

When I try to re-install, Norton intervenes and reports TROJAN.GEN.2 and also the other warnings as highlighted above by bjm.

Unlike bjm, on my PC, Norton is reporting a high severity level with these items and I notice it also now gives download.freemake.net a 'BAD' reputation level.

This is so annoying.

33

I have just started to have this problem. I have used Freemake Video Converter for years with no problems, and now the program just won't start. (An error window appears, saying "Freemake Video Converter can't start".!) I think that I have traced the problem to Norton intervention, but I do wonder if it is a false positive. I agree with Essa TD2 (above), and am also hoping that Norton and Freemake will contact each other and overcome this very annoying problem.

34

>> How to report false positives

EssaTD2: I am able to install the new converter by disabling Norton while doing the installation, but if a scan is run it is removed.  I'm hoping Freemake and/or Norton will be able to overcome this problem.

Have you tried to Exclude from Auto-Protect
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832

If no joy.....have you tried to Exclude by Signature
https://www.symantec.com/security_response/writeup.jsp?docid=2017-040616-1325-99

https://support.norton.com/sp/en/us/home/current/solutions/v54298598

Freemake Video Converter
https://community.norton.com/en/forums/false-positive-31

35

I've used Freemake Video Converter for years.  It is very easy to use and will covert virtually any file format.  It's also extremely simple to burn content to DVDs.  I have an abundance of experience with its PUPS.  Getting rid of them if they manage to get installed is no problem.  I am able to install the new converter by disabling Norton while doing the installation, but if a scan is run it is removed.  I'm hoping Freemake and/or Norton will be able to overcome this problem.