True or false FileRePup vrai ou faux fileRepPup

[Pele]

Bonjour, j’ai voulu mettre à jour un logiciel que j’utilise depuis quelque temps, mais Norton 360 a bloqué la mise à jour en précisant qu’il s’agit d’un FilerepPup.
Comment être sûr que c’est un vrai ou un faux FilrepPup ? Il s’agit d’un logiciel du site www.dyslogiciel
Hello, I wanted to update a software that I have been using for some time, but Norton 360 blocked the update by stating that it is a FilerepPup.

How to be sure that it is a real or a fake FilrepPup? This is a software site dyslogiciel

Issue abstract:

Detailed description:

Product & version number:

OS details:

What is the error message you are seeing?

If you have any supporting screenshots, please add them:

[bjm]

@Pele

How to be sure that it is a real or a fake FilrepPup? This is a software site dyslogiciel

https://www.dyslogiciel.fr/#telechargement

Submit a file or URL to Norton for review here

Learn what to do with repeated Norton detections here

=====================================================

@Pele

How to be sure that it is a real or a fake FilrepPup? This is a software site dyslogiciel

https://www.dyslogiciel.fr/#telechargement

File: Installation-de-Dys-Vocal.exe
File size: 214 MB (224,278,664 bytes)
MD5 checksum: F7E2321FC3494A5DFC9D9A4834BFB7C8
SHA1 checksum: C533424B63BA36469221DE2F1A00CDA1F7887862
Date/Time: 5/26/2025

VirusTotal report
https://www.virustotal.com/gui/file/daeb31f958b94d6e15b

========================================================

[bjm]

fwiw ~ as test:

The installation is not complete. If you cancel now, the program will not be installed.
You will need to restart this wizard to complete the installation.
Do you still want to exit the installation wizard?

Runtime Error (at 12:2125):
Internal error: An attempt was made to expand the “app”
constant before it was initialized.

Caveat: I’m not familiar with Dys-Vocal & my native language may be causing the error?

==========================================

• EDIT

0f47ed8a2862/2025-05-26T18:23:04.389Z

============================================

0f47ed8a2862/2025-05-26T18:23:04.389Z

Threat name: XML:Spigot-A [PUP]
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Blocked
Options: Report false detection
Detected by: Auto-Protect
On PC from: 5/26/25
Last Used: 5/26/25
Startup Item: No

Very few
Very few in the Norton Community have used this file.
Mature
This file was released 4 years ago.
High
The file risk is high.

Activity
Path | Type | Status
C:\Dys-Vocal\GoogleChromePortable\Data\profile\Default\Preferences | File | exceptions

[bjm]

The text-to-speech voice Hortense (free French voice from Microsoft)
does not appear to be installed on this computer.
Do you want to install this voice?
Yes No

Caveat: I’m not familiar with Dys-Vocal nor French language

[bjm]

fwiw ~ related pics:

Caveat: I’m not familiar with Dys-Vocal

The text-to-speech voice Hortense (free French voice from Microsoft)
does not appear to be installed on this computer.
Do you want to install this voice?
Yes No

Wondering whether " install this voice" is deemed PUP? IDK

======================================================

======================================================

Submit a file or URL to Norton for review here

=======================================================

Caveat: I’m not familiar with Dys-Vocal

[bjm]

Caveat: I’m not familiar with Dys-Vocal nor French language
as always, your mileage may vary

====================================================

fwiw ~ Norton File Insight does not trust the installer [PUP]…but, trusts the installed

=======================================================

Threat name: XML:Spigot-A [PUP]
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Blocked
Options: Report false detection
Detected by: Auto-Protect
On PC from: 5/26/25, 4:00 PM
Last Used: 5/26/25, 4:20 PM
Startup Item: No

Very few
Very few in the Norton Community have used this file.
Mature
This file was released 4 years ago.
High
The file risk is high.

Path | Type | Status
C:\Dys-Vocal\GoogleChromePortable\Data\Default\Preferences | File | Infected

==========================================================

File: GoogleChromePortable.exe
File size: 353 KB (361,000 bytes)
MD5 checksum: C94A3239CEBEFE3FF64E9BFC332DA9D3
SHA1 checksum: D452455657F899DDC0F297CCC2ECD66805453707
Date/Time: 5/26/2025

=============================================

fwiw ~ Norton does not trust:
GoogleChromePortable\Data\Default\Preferences & GoogleChromePortable\Data\Default\Preferences-copy

Path | Type | Status
C:\Dys-Vocal\GoogleChromePortable\Data\Default\Preferences | File | Infected

==================================================

File: Preferences
File size: 101 KB (103,181 bytes)
MD5 checksum: 67E4FBE36490CB25DD79F11E60E9DDBD
SHA1 checksum: 41DB46E899406BD1B039109918B27D0E56ECF809
Date/Time: 5/26/2025

VirusTotal report:
https://www.virustotal.com/gui/file/8335dd432e7cd72

File: Preferences-copy
File size: 103 KB (105,537 bytes)
MD5 checksum: 9EECFE302AF3BA373339351D046EA300
SHA1 checksum: 1F4F655B5C3A417F669E79C0D494BA13EAF55BE6
Date/Time: 5/26/2025

VirusTotal report:
https://www.virustotal.com/gui/file/aeb6267381ec88beda43067

[bjm]

I’m not able to upload Preferences file → https://submissions.norton.com/reportfalsepositive#pc

Edit: Okay…I was able to upload Preferences-copy after Create exclusion & restore

Create exclusion & restore against Preferences is Whoops

I imagine Whoops because I’ve since yesterday uninstalled Dys-Vocal.

===========================================

Send for analysis from within Quarantine appears to work…but, who knows?

Hello @Pele
I’ll check back tomorrow.

[bjm]

No response from my submissions.
No change on VirusTotal.

[bjm]

No response from my submissions.
No change on VirusTotal.

=============================================

@Pele

How to be sure that it is a real or a fake FilrepPup? This is a software site dyslogiciel

0ea0f7c8ebd1/2025-05-29T00:14:26.510Z

Threat name: FileRepPup [PUP]
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Blocked
Options: Report false detection
Detected by: Auto-Protect
On PC from: 5/26/25
Last Used: 5/28/25
Startup Item: No

Very few
Very few in the Norton Community have used this file.
Mature
This file was released 7 months ago.
High
The file risk is high.
Downloaded from: https: //www. dyslogiciel3.fr/public_html/Installation-de-Dys-Vocal. exe
Path | Type | Status
C:\Users\user\OneDrive\Desktop\Installation-de-Dys-Vocal.exe | File | Infected

==================================================

Report False Positive →

@Gayathri_R
Does not being able to upload file because the file contains a virus or potentially unwanted software make sense?

I was able to quarantine and then Extract to upload file…but, Report False Positive = upstream request timeout
I was able to quarantine and then Create exclusion & restore…but, Report False Positive = upstream request timeout

What’s the secret handshake to report false positive?

=====================================================

File: Installation-de-Dys-Vocal.exe
File size: 214 MB (224,278,664 bytes)
MD5 checksum: F7E2321FC3494A5DFC9D9A4834BFB7C8
SHA1 checksum: C533424B63BA36469221DE2F1A00CDA1F7887862
Date/Time: 5/28/2025

VirusTotal report:https://www.virustotal.com/gui/file/daeb31f9583db94d6e15b

[bjm]

[Pele]

bonjour, donc selon vous c’est un faux positif ? Merci
hello, so in your opinion this is a false positive? Thank you

[bjm]

@Pele

Hello, so in your opinion this is a false positive? Thank you.

Hello @Pele
Yes, in my opinion this is a false positive.
Unfortunately, Norton false positive reporting process (at this time) is counter intuitive, lengthy, lacking n’ useless.

I’m not able to upload a file because the file contains a virus or potentially unwanted software…makes no sense.

false positive submissions receive no response here
Your email address here is useless

Norton has no process flow to notify me and no process flow for me to follow up on a detection.
Norton wants me to follow up with Norton support and wait for a call back. Nope…not interested.
Norton wants me try running the file or app or visit the website again after 48 hours. If Norton doesn’t detect it, Norton considers it safe.
I want Norton to notify me via email…Norton consider it safe or not safe.
I want a way to follow up on a not safe determination.

[bjm]

@Pele

Hello, so in your opinion this is a false positive? Thank you.

regarding:
C:\Dys-Vocal\GoogleChromePortable\Data\Default\Preferences | File | Infected
C:\Dys-Vocal\GoogleChromePortable\Data\Default\Preferences-copy | File | Infected

Norton detects \Preferences\ & \Preferences-copy\ … as [PUP]

Threat name: XML:Spigot-A [PUP]
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Blocked
Detected by: Auto-Protect

==================================================

AI Overview
A PUP in the context of Norton refers to a Potentially Unwanted Program, or a software program that can be bundled with legitimate software and may be unwanted by the user. These PUPs are not necessarily malicious, but they can cause annoyances like displaying ads, slowing down the computer, or modifying browser settings. While Norton primarily focuses on malware that can damage a system, it does have tools to scan for and remove PUPs.

• What are PUPs?
  PUPs are software programs that are often bundled with legitimate software and may be unwanted by the user. They can be adware, browser extensions, or other types of software that may be intrusive or cause unwanted behavior.

• Why are PUPs unwanted?
  While not all PUPs are malicious, they can be annoying, slow down your system, display unwanted ads, or modify browser settings. They can also potentially introduce security risks by tracking online activity or installing other unwanted programs.

• How does Norton handle PUPs?
  Norton’s products primarily focus on malware that can cause damage to your system. While they don’t always detect PUPs, Norton Power Eraser can be used to scan for and remove unwanted applications, including PUPs.

• Example:
  An example of a PUP is a browser extension that installs without the user’s knowledge and displays unwanted ads.

[bjm]

2e552cbd8396/2025-05-30T21:39:22.169Z

Threat name: FileRepPup [PUP]
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Blocked
Options: Report false detection
Detected by: Auto-Protect
On PC from: 5/30/25,
Last Used: 5/30/25,
Startup Item: No

Very few
Very few in the Norton Community have used this file.
Mature
This file was released 7 months ago.
High
The file risk is high.

Downloaded from: https: //www.dyslogiciel3. fr/public_html/Installation-de-Dys-Vocal. exe
Path | Type | Status
C:\Users\bjmer\OneDrive\Desktop\Installation-de-Dys-Vocal.exe | File | Infected

VirusTotal report: https://www.virustotal.com/gui/file/daeb31f92f6592664b94d6e15b

=====================================

Submit = stream timeout

[bjm]

@bjm

Submit = stream timeout

now I’m seeing → upstream request timeout

Norton support wanted remote session. I declined.
Norton support promised to escalate timeout issue and not being able to upload detected sample issue.
case number 92975351

[bjm]

from Chrome (first/third party cookies allowed) (ad block off) (vpn off) = Submit → captcha verification timeout → Submit → verification timeout → etc.,

=========================================================

https://submissions.norton.com/reportfalsepositive#pc →

=========================================================

[bjm]

@MJay
Please review this thread.

I’m not able to upload file here because the file contains a virus or potentially unwanted software…head scratch!

files are 7 months old & only detected by Gen…head scratch!

[bjm]

[MJay]

Hello,
Thank you @bjm for highlighting this thread!
Let me confirm that after analysis, the files were evaluated as clean, so they should no longer be detected. The change is already reflected on Virustotal. If you’d have a chance to run LiveUpdate and test it on the machine, I’d be glad to hear the outcome.

[bjm]

@MJay

If you’d have a chance to run LiveUpdate and test it on the machine, I’d be glad to hear the outcome.

Hi @MJay
Thanks for reviewing this thread.

a1da1b4f3f92/2025-06-03T11:02:45.612Z

5614f73e48d6/2025-06-03T11:04:59.112Z