PDA

View Full Version : Virus Alarm v1.5 in scanner.exe



AndrewFG
02-21-2014, 04:16 PM
I just installed v1.5 and my Norton Antivirus software reports suspicious activity by Scanner.exe as follows.

Filename: Scanner.exe
Threat name: SONAR.Heuristic.120
Full Path: c:\program files\illustrate\perfecttunes\scanner.exe
____________________________

Details
Very Few Users,* Very New,* Risk High

Origin
Downloaded from
*Unknown

Activity
Actions performed: 193
____________________________

On computers as of*
2014.02.21 at 21:50:57

Last Used*
2014.02.21 at 21:50:57

Startup Item*
No

Launched*
Yes
____________________________

Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week *ago.

High
This file risk is high.

SONAR Protection monitors for suspicious program activity on your computer.
____________________________

Source: External Media

Source File:
perfecttunes-r1.5-registered.exe

File Created:
scanner.exe
____________________________

System Settings Actions

Event: Process start (Performed by c:\program files\illustrate\perfecttunes\scanner.exe, PID:2352) No fix attempted
<cut>
...
</cut>

____________________________

Suspicious Actions

Event: Keystroke capture (Performed by c:\program files\illustrate\perfecttunes\scanner.exe, PID:2352) No fix attempted
____________________________

File Thumbprint - SHA:
4a0acc7935699cc35e4ddb4d904aee4f060207c53837c1afa1 c71da427296f6b
File Thumbprint - MD5:
Not available

Spoon
02-21-2014, 04:26 PM
You are not having much luck with Norton today...

"Suspicious Actions Event: Keystroke capture (Performed by c:\program files\illustrate\perfecttunes\scanner.exe, PID:2352) No fix attempted"

Our programs might detect keypresses and respond to them, after all that is what an interactive program should do.

AndrewFG
02-21-2014, 04:37 PM
I have informed Norton Symantec just now.

AndrewFG
02-22-2014, 05:30 AM
^
Symantec has updated their virus definitions.