Was it RC1 or 2 then? As I'm not seeing it with RC3?
The way AV programs work, or one way at least, is they look for
"signatures" of known viruses. Each virus tends to have a group of bytes
that distinguishes it from other programs - in the same way, if you wanted,
you could probably go through a library and pick say the first sentence out
of each book. You could then bring in a new book without a cover, compare
the first sentence against your list of known sentences, and decide whether
it matched anything you'd seen before.
Occasionally you might get two books that have the same first sentence,
and so one might be misidentified as the other. It basically works exactly
the same way with viruses. Because it is just a string of characters, they
could appear in other programs, and occasionally do, that is how false
So, when we built rc2 (or 1?) it just happened that the exact sequence of
characters appeared in our setup file as must appear in some virus. It's
something that Symantec have to update in their database, and once I know
which build I can let them know - they have a set process for letting them
know about false positives. They'll then double check our file, confirm
with what else they know about that virus that it definitely is a false
positive and then update their definition list, and that will go out the
next time they send out an update (usually in a day or so).
For now, RC3 seems ok so you should be able to download and run that if
On Tue, Jun 12, 2018 at 7:17 PM, Michael Chopra <michaelchopra38@...