Stream: Archive Mirror: Isabelle Users Mailing List

Topic: [isabelle] isabelle2012-rc3\isabelle.exe removed by Norto...


view this post on Zulip Email Gateway (Aug 18 2022 at 19:47):

From: gottfried.barrow@gmx.com
I unpacked "Isabelle2012-RC3.exe", and then I executed
"isabelle2012-rc3\isabelle.exe". Norton didn't like the file being
executed and deleted it. Norton gives the message "A program was
behaving suspiciously on your computer. This program was blocked and
removed."

I unpacked "Isabelle2012-RC3.exe" again and scanned "isabelle.exe" with
Norton "Insight Network Scan", and it passes the virus scan. I did a
"Norton File Insight" scan on it, and reports that there's not enough
info on it to recommend it. I executed it again, and Norton blocked and
deleted it again.

I don't see any instructions in the folder ""isabelle2012-rc3" or
http://isabelle.in.tum.de/website-Isabelle2012-RC3/ that tells me
anything about how to start Isabelle.

It's no big deal. I guess I start it up like I did Isabelle2011, except
using the Cygwin that's distributed with it now. I haven't tried to do
that yet.

--GB

view this post on Zulip Email Gateway (Aug 18 2022 at 19:47):

From: Makarius <makarius@sketis.net>
On Sat, 19 May 2012, gottfried.barrow@gmx.com wrote:

I unpacked "Isabelle2012-RC3.exe" again and scanned "isabelle.exe" with
Norton "Insight Network Scan", and it passes the virus scan. I did a
"Norton File Insight" scan on it, and reports that there's not enough
info on it to recommend it. I executed it again, and Norton blocked and
deleted it again.

The Isabelle.exe is generated by http://launch4j.sourceforge.net/

I can't say why some malware checkers like or dislike some executables.

I don't see any instructions in the folder ""isabelle2012-rc3" or
http://isabelle.in.tum.de/website-Isabelle2012-RC3/ that tells me
anything about how to start Isabelle.

There is more text in
http://isabelle.in.tum.de/website-Isabelle2012-RC3/installation.html

The hope is that users either guess the purpose of "Cygwin-Terminal" and
"Cygwin-Setup" from the Isabelle directory layout, or find their way to
the explicit text.

In the terminal you can use "isabelle jedit" etc. as before, hopefully
without odd antivirus tools getting in between.

Makarius

view this post on Zulip Email Gateway (Aug 18 2022 at 19:49):

From: gottfried.barrow@gmx.com
On 5/20/2012 3:48 AM, Makarius wrote:

On Sat, 19 May 2012, gottfried.barrow@gmx.com wrote:

I unpacked "Isabelle2012-RC3.exe" again and scanned "isabelle.exe"
with Norton "Insight Network Scan", and it passes the virus scan. I
did a "Norton File Insight" scan on it, and reports that there's not
enough info on it to recommend it. I executed it again, and Norton
blocked and deleted it again.

The Isabelle.exe is generated by http://launch4j.sourceforge.net/

I can't say why some malware checkers like or dislike some executables.

Again, I don't care that Norton deletes the launcher, but as Isabelle
goes mainstream in the Windows world, such a thing could create more
complaints than you'd like. Norton is a big player in anti-virus.

I'll give my two cents about your Isabelle.exe not getting past Norton.

First, I've downloaded and executed hundreds of cracked and hacked
Windows applications, and many, many didn't pass Norton's initial scan,
or they got shut down by Norton after I executed them.

Second, I know that Norton is more aggressive, which results in false
positives. I know this because it has flagged applications hacked by
certain hacker groups that don't have a reputation for malicious
hacking, and which other forum commenters weren't complaining about as
being infected.

Third, though Norton has flagged hacked applications that I didn't think
were infected, I've also executed hundreds of free applications from
reputable sites, and I can't remember Norton shutting any of them down.

Fourth, any hacking is going to be the attaching of the hacker's code to
the normal code and jumping around in the code. Launch4j is executing
other people's code, so it kind of fits that description.

It could be that less skilled hackers have used launch4j code to hack
applications, with the result being that Norton has some kind of
signature on Launch4j code because it's been used by hackers. That's
speculation on my part. I'm not a hacker.

Fifth, surely there is code out there that will execute Isabelle without
getting shut down by Norton. I say that because, ASSIGN, a hacking
group, has hacked many an application that Norton is completely happy with.

I don't see any instructions in the folder ""isabelle2012-rc3" or
http://isabelle.in.tum.de/website-Isabelle2012-RC3/ that tells me
anything about how to start Isabelle.

There is more text in
http://isabelle.in.tum.de/website-Isabelle2012-RC3/installation.html

For the 2011 release,
http://www.cl.cam.ac.uk/research/hvg/isabelle/download.html, the basic
install instructions are on the download page. I guess that, the new
download icon, and the deleting of the executable confused me. You might
consider putting the installation.html link at the top, under the
download icon.

Thanks,
GB

view this post on Zulip Email Gateway (Aug 18 2022 at 19:50):

From: Makarius <makarius@sketis.net>
Here is an interesting thread on Stackoverflow
http://stackoverflow.com/questions/1701674/windows-executable-to-run-java-application-deleted-by-anti-virus-scanner

One person actually recommends Launch4j, but he is himself working on
WinRun4j. There are some other reasons why I might try the latter for the
next release, after Isabelle2012.

Makarius


Last updated: Apr 19 2024 at 16:20 UTC