Re: [Oorexx-devel] Kedit utility - where to put it

2014-01-21 Thread Sahananda (Jon) Wolfers
Hi Mark,

That looks good - thank you for creating the bug report.
As you will no doubt have seen, I have created a small folder in the
incubator.

I think that there are many rexx-ers who use Kedit, it is operationally
close enough to Xedit to feel familiar to them and allows them to work the
way they are used to on the mainframe without the console bound awkwardness
of 'The'.  Those two utilities make things a lot easier.

I was going to make a point of how much cheaper than Slickedit Kedit is,
but I see that the price of Kedit has gone up and the price of Slickedit
has come down to the point where Slickedit is only just over twice as
expensive as Kedit now.  I think it was about ten times as much last time I
looked.

Kedit is being sunsetted, so I don't imagine it will attract many new
users, and I expect most people who want these macros will have had them
for a long time, but the rexindex was in desperate need of a bit of
maintenance to cope with the evolution of ooRexx which has come such a long
way in the last 10 years.

Jon



On 20 January 2014 18:25, Mark Miesfeld  wrote:

> On Sun, Jan 19, 2014 at 10:21 PM, Sahananda (Jon) Wolfers <
> sahana...@windhorse.biz> wrote:
>
>>
>> If I get time, I will write a rexx sample script to download all files
>> from a directory from sourceforge into a subfolder in your download folder.
>>  Not sure how, I could use rexcurl, but perhaps one wouldn't want one of
>> Mark's utilities as a dependency for an ooRexx sample (although that might
>> be a good thing).  I could do it with ole & IE, but I'm not sure whether
>> that would work on Linux.  Do you have thoughts?
>>
>>
> Jon,
>
> I have 2 thoughts
>
> 1.)  I can't believe that SourceForge intends for the snapshot feature to
> work that way.  So, if we open a bug I think they will fix it.  It would be
> a very cool feature if it did work.
>
> https://sourceforge.net/p/forge/site-support/6552/
>
> 2.)  If we were to decide to allow / accept user contributions and
> actually want ooRexx users to be able to get those contributions, it would
> be more user friendly to have a section on the Files download page for them.
>
> Currently the download page has:
>
> Name   Modified
> Totals: 10 Items
> oorexx  < 14 hours ago
> ooDialog2014-01-18
> oorexx-docs 2013-12-09
> ooSQLite2013-08-27
> oorexxunit  2012-07-25
> oorexx-buildutils   2010-08-18
> RexxGTK 2009-11-01
> OldFiles2009-07-17
> windows-build-tools 2009-02-12
> orxutils2006-09-15
>
> I would suggest adding 1 more section:
>
> user-contributions  2014-04-11
>
> And under that section have sections for individual contributions.  I see
> several things in the incubator that would be easier for ooRexx users to
> access if they could be downloaded from the Files download pages.  They
> could go under user-contributions:
>
> decimalFormat
> keditMacros
> mod_oorexx
> ooRexxShell
> ZabrodskyAAT
>
> --
> Mark Miesfeld
>
>
>
> --
> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
> Learn Why More Businesses Are Choosing CenturyLink Cloud For
> Critical Workloads, Development Environments & Everything In Between.
> Get a Quote or Start a Free Trial Today.
>
> http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
> ___
> Oorexx-devel mailing list
> Oorexx-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>
>
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


[Oorexx-devel] Merging with svn

2014-01-21 Thread Rick McGuire
I know a number of people are using my earlier tutorial on how to do merges
with svn, so I thought I'd highlight something I just learned.  More recent
versions of svn have a number of enhancements that make doing merges a lot
easier.  In particular, it gets rid of the need to do the r(m-1) r(m)
specification on the merge command.  Here's a nice tutorial on doing
merges:

http://svnbook.red-bean.com/en/1.7/svn.branchmerge.basicmerging.html

Rick
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


[Oorexx-devel] rxapi stops working

2014-01-21 Thread Mike Cowlishaw
Since I installed 4.2.0 RC this morning I've had a couple of 'rxapi has stopped
working' popups.  After the second time I thought I had found a way to reproduce
it (a command that caused 2 more occurrences of the popup) but the third try
worked without error, as did several more tries.  So it is going to be difficult
to reproduce ...
 
Ring any bells with anyone?   This is on Win7, 32-bit.
 
Mike
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


Re: [Oorexx-devel] rxapi stops working

2014-01-21 Thread Rick McGuire
No, we've not had any reports of issues like that.  rxapi has not even had
much (if any) update activity for this release, so it's hard to even guess
what might be going wrong.

Rick


On Tue, Jan 21, 2014 at 8:28 AM, Mike Cowlishaw  wrote:

>  Since I installed 4.2.0 RC this morning I've had a couple of 'rxapi has
> stopped working' popups.  After the second time I thought I had found a way
> to reproduce it (a command that caused 2 more occurrences of the popup) but
> the third try worked without error, as did several more tries.  So it is
> going to be difficult to reproduce ...
>
> Ring any bells with anyone?   This is on Win7, 32-bit.
>
> Mike
>
>
> --
> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
> Learn Why More Businesses Are Choosing CenturyLink Cloud For
> Critical Workloads, Development Environments & Everything In Between.
> Get a Quote or Start a Free Trial Today.
>
> http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
> ___
> Oorexx-devel mailing list
> Oorexx-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>
>
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


Re: [Oorexx-devel] rxapi stops working

2014-01-21 Thread Rick McGuire
Also, some information about what you suspected was causing the problem
might give a nugget of information that could be useful in tracking down
the cause.

Rick


On Tue, Jan 21, 2014 at 8:28 AM, Mike Cowlishaw  wrote:

>  Since I installed 4.2.0 RC this morning I've had a couple of 'rxapi has
> stopped working' popups.  After the second time I thought I had found a way
> to reproduce it (a command that caused 2 more occurrences of the popup) but
> the third try worked without error, as did several more tries.  So it is
> going to be difficult to reproduce ...
>
> Ring any bells with anyone?   This is on Win7, 32-bit.
>
> Mike
>
>
> --
> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
> Learn Why More Businesses Are Choosing CenturyLink Cloud For
> Critical Workloads, Development Environments & Everything In Between.
> Get a Quote or Start a Free Trial Today.
>
> http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
> ___
> Oorexx-devel mailing list
> Oorexx-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>
>
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


Re: [Oorexx-devel] rxapi stops working

2014-01-21 Thread Mike Cowlishaw
 

Also, some information about what you suspected was causing the problem might
give a nugget of information that could be useful in tracking down the cause. 
 
I didn't get as far as having a suspicion :-).   What I was doing (on the 3
occasions that seemed to be reproducible) was:
 
In a command window, running ELAP (the old VM shell I wrote but now run on
Windows):
 
Typed in the command:
  
  c \tex\mi
 
(this is 'change to directory best matching '\tex' then to directory in that
that best matches 'mi').
 
The command causes ELAP to cals another Rexx program to 'expand' the argument to
a fully qualifed directory path (in this case "\text" because there was no match
to 'mi').
 
That is then effected by a call to the directory BIF to change ELAP's context to
the new directory and an actual CD command is issued to Windows so it knows
about the change too.
 
All of the above seemed to work as usual, with ELAP reporting that 'mi' was not
found and then displaying the Ready message and prompt, e.g.,:
 
  Ready; 2:29pm (09:29 EDT)
  m:\text}
 
As that is displayed, Windows puts up the 'rxapi has stopped working' box -- on
cancelling that, everything seems to run normally.
 
So it's a bit mysterious -- something along the way broke, but ELAP itself
seemed to keep running just fine.
 
[All of this after a reboot, fresh install, and another reboot.]
 
Mike
 
 
 

--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


Re: [Oorexx-devel] oorexx 4.2.0 for 32 bit Windows - Unsafe, says Norton!!!

2014-01-21 Thread Mark Miesfeld
On Tue, Jan 21, 2014 at 6:49 AM, Oliver Sims <
oliver.s...@simsassociates.co.uk> wrote:

>  Just downloaded oorexx-4.2.0.windows.x86_32.exe to my XP machine. At end
> of download, Norton anti-virus popped up and said it was "unsafe" and
> removed the downloaded file!!!
>


This is a false positive by Norton.  As you can see Norton is using a
heuristic to detect the virus.  Heuristic checks are notorious for
producing false positives.

I submitted the problem to Norton and they admitted it was a false positive
and said it would be corrected.  But, if they did anything, it seems if is
related to the file name only.

You can turn Norton off and download the file,  The go to:

https://submit.symantec.com/false_positive/

and submit the download as a false positive.  I believe Norton will come
back and agree it is a false positive.

Other than that I don't know what to do about it.

I believe it is actually coming from NSIS.  The other thing you can do is
turn Norton off, run the installation, then turn Norton back on and have it
scan the installation directory.  I believe it will report the files are
okay.

--
Mark Miesfeld
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


[Oorexx-devel] Fwd: [No Reply] False Positive Submission [3393192]

2014-01-21 Thread Mark Miesfeld
This is the reply I got from Norton when I submitted the first beta file to
them.  As you can see they affirm it is a false positive and say they
corrected it.

--
Mark Miesfeld

-- Forwarded message --
From: Symantec FP Incident Response 
Date: Sun, Dec 15, 2013 at 10:50 PM
Subject: [No Reply] False Positive Submission [3393192]
To: miesf...@gmail.com


In relation to submission [3393192].

Upon further analysis and investigation we have verified your submission
and as such this detection will be removed from our products.

The updated detection will be distributed in the next set of virus
definitions, available via LiveUpdate or from our website at
http://securityresponse.symantec.com/avcenter/defs.download.html

Decisions made by Symantec are subject to change if alterations to the
Software are made over time or as classification criteria and/or the policy
employed by Symantec changes over time to address the evolving landscape.

If you are a software vendor, why not take part in our whitelisting program?
To participate in this program, please complete the following form:
https://submit.symantec.com/whitelist


Sincerely,
Symantec Security Response
http://securityresponse.symantec.com

This message (including any attachments) is intended only for the use of
the individual or entity to which it is addressed and may contain
information that is non-public, proprietary, privileged, confidential, and
exempt from disclosure under applicable law or may constitute as attorney
work product. If you are not the intended recipient, you are hereby
notified that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone and (i) destroy
this message if a facsimile or (ii) delete this message immediately if this
is an electronic communication. Thank you.
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


[Oorexx-devel] Fwd: [No Reply] False Positive submission (3393192)

2014-01-21 Thread Mark Miesfeld
Here is the submission report for 3393192.  I couldn't find it at first or
I would have forwarded if first.

As you can see here, the file I submitted had a different file name.  Which
is why I think their "correction" may have been file name based.

--
Mark Miesfeld


-- Forwarded message --
From: 
Date: Sun, Dec 15, 2013 at 4:10 PM
Subject: [No Reply] False Positive submission (3393192)
To: miesf...@gmail.com


Thank you for contacting Symantec.

Your submission has been received and will be reviewed. We endeavor to
respond to all submissions within 2 working days.

The tracking number for your submission is: 3393192, please reference this
tracking number in any further correspondence on this issue.

Your submission:
-
  When did the detection you are reporting occur? = DOWNLOAD
  Which product were you using when you saw this? = NIS
  Which of the following types of detection are you reporting? =
AUTO-PROTECT

  Name (person to contact) = Mark Miesfeld
  Email address = miesf...@gmail.com
  Are you the creator or distributor of the software in question? = yes

  File being uploaded = oorexx420_9716-x86_32.exe
  Download (or blocking) URL =

  Name of the software being detected = oorexx420_9716-x86_32.exe
  Name of detection given by Symantec product = Suspicious.Cloud.9.A
  File hash or clipboard paste from product = This information has
disappeared.  Your instructions did no good.  I can not locate the event in
history.

  Additional notes or steps to reproduce the detection = The file uploaded
is a Windows installation file for ooRexx an open source project.  The
project is hosted on SourceForge:
https://sourceforge.net/projects/oorexx/I am a developer and committer
on the project.

I built the ooRexx interpreter and the installation package from scratch.
 I had Norton AntiVirus scan the package.  It reports no threats:

Scan Statistics:
Scan Start:
Local: 12/15/2013 2:55 PM
UTC: 12/15/2013 10:55 PM
Scan Time: 9 seconds
Scan Targets: C:\work.ooRexx\wc\main.4.2.0\ooRexx420_9716-x86_32.exe
Counts:
Total items scanned: 1
- Files & Directories: 1
- Registry Entries: 0
- Processes & Start-up Items: 0
- Network & Browser Items: 0
- Other: 0
- Trusted Files: 0
- Skipped Files: 0

Total security risks detected: 0
Total items resolved: 0
Total items that require attention: 0

Resolved Threats:
No risks have been resolved

Unresolved Threats:
No unresolved risks

When I go to upload the file to SoureceForge as soon as the file open
dialog appears and I navigate to the correct folder Norton AntiVirus puts
up a red alert box saying it is processing a threat.  Then it automatically
deletes it.

It did the same thing when I used the Choose File button on this page.  I
then used the exclude button on the threat processing page to exclude the
file so I could upload it here.  Now the event from history has
disappeared.  And even though I set all exclusions to none and none are
listed when I go to upload the file to SourceForge it no longer produces an
alert.

Ive been fooling with this for 2 days.  Yesterday afternoon when I first
got the alert. I did a complete computer scan and besides tracking cookies
no threats were found.  I did a second complete scan overnight again no
threats.  It then did a complete clean of the build and built the package
immediately scanned it and then immediately tried to upload it.  Got the
threat notice.

I know there is no virus in the code base and I dont see how the executable
could have got infected in such a short time.  I dont understand how using
Norton AntiVirus to to scan the file can produce a no threat report and
then trying to upload the file produces a threat warning.

I dont see how two complete computer scans by Norton AntiVirus can say all
threats resolved then doing a clean build of the executable can end up with
an executable that Norton says is infected.

It seems to me this has to be a false positive.

Thanks for your time.

-

Sincerely,
Symantec Security Response
http://securityresponse.symantec.com

This message (including any attachments) is intended only for the use of
the individual or entity to which it is addressed and may contain
information that is non-public, proprietary, privileged, confidential, and
exempt from disclosure under applicable law or may constitute as attorney
work product. If you are not the intended recipient, you are hereby
notified that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone and (i) destroy
this message if a facsimile or (ii) delete this message immediately if this
is an electronic communication. Thank you.
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a

[Oorexx-devel] Fwd: [No Reply] False Positive submission (3415563)

2014-01-21 Thread Mark Miesfeld
I just submitted the release canidate build to Symantec.

Here is their submission received report.

Usually they reply sooner than 2 days.  I'll forward their reply as soon as
I get it.

The process of submitting it is relatively easy and straight forward.  I
encourage any one who has qualms about the file to submit it on their own.

--
Mark Miesfeld


-- Forwarded message --
From: 
Date: Tue, Jan 21, 2014 at 8:50 AM
Subject: [No Reply] False Positive submission (3415563)
To: miesf...@gmail.com


Thank you for contacting Symantec.

Your submission has been received and will be reviewed. We endeavor to
respond to all submissions within 2 working days.

The tracking number for your submission is: 3415563, please reference this
tracking number in any further correspondence on this issue.

Your submission:
-
  When did the detection you are reporting occur? = DOWNLOAD
  Which product were you using when you saw this? = NIS
  Which of the following types of detection are you reporting? = INSIGHT

  Name (person to contact) = Mark Miesfeld
  Email address = miesf...@gmail.com
  Are you the creator or distributor of the software in question? = yes

  File being uploaded = ooRexx-4.2.0.windows.x86_32.exe
  Download (or blocking) URL =
http://sourceforge.net/projects/oorexx/files/oorexx/4.2.0%20%28release%20candidate%29/ooRexx-4.2.0.windows.x86_32.exe/download

  Name of the software being detected = oorexx-4.2.0.windows.x86_32.exe
  Name of detection given by Symantec product = Suspicious.Cloud.7.EP
  File hash or clipboard paste from product = I dont have this.

  Additional notes or steps to reproduce the detection = In addition to
uploading the file I also included the URL to publicly download the file.
 The detection from Norton happens when I download the file.

-

Sincerely,
Symantec Security Response
http://securityresponse.symantec.com

This message (including any attachments) is intended only for the use of
the individual or entity to which it is addressed and may contain
information that is non-public, proprietary, privileged, confidential, and
exempt from disclosure under applicable law or may constitute as attorney
work product. If you are not the intended recipient, you are hereby
notified that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone and (i) destroy
this message if a facsimile or (ii) delete this message immediately if this
is an electronic communication. Thank you.
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


Re: [Oorexx-devel] oorexx 4.2.0 for 32 bit Windows - Unsafe, says Norton!!!

2014-01-21 Thread Mark Miesfeld
Here is a link to NSIS's page on false positives.

http://nsis.sourceforge.net/NSIS_False_Positives

There are some links to online virus scanners.  You can try scanning the
file with one or more of them.

Here is a link to the report of doing a scan from one of them.  If you look
at the report, it reports 2 out of 23 scanners report malware.  However the
names of the malware are different, and different from what Norton reported.

http://virusscan.jotti.org/en/scanresult/92c7a03d4c30e1c2f398d4f90a30968d2bb935ef

Basically, I just think the anti-virus software is not very reliable.

--
Mark Miesfeld



On Tue, Jan 21, 2014 at 8:35 AM, Mark Miesfeld  wrote:

>
> On Tue, Jan 21, 2014 at 6:49 AM, Oliver Sims <
> oliver.s...@simsassociates.co.uk> wrote:
>
>>  Just downloaded oorexx-4.2.0.windows.x86_32.exe to my XP machine. At
>> end of download, Norton anti-virus popped up and said it was "unsafe" and
>> removed the downloaded file!!!
>>
>
>
> This is a false positive by Norton.  As you can see Norton is using a
> heuristic to detect the virus.  Heuristic checks are notorious for
> producing false positives.
>
> I submitted the problem to Norton and they admitted it was a false
> positive and said it would be corrected.  But, if they did anything, it
> seems if is related to the file name only.
>
> You can turn Norton off and download the file,  The go to:
>
> https://submit.symantec.com/false_positive/
>
> and submit the download as a false positive.  I believe Norton will come
> back and agree it is a false positive.
>
> Other than that I don't know what to do about it.
>
> I believe it is actually coming from NSIS.  The other thing you can do is
> turn Norton off, run the installation, then turn Norton back on and have it
> scan the installation directory.  I believe it will report the files are
> okay.
>
> --
> Mark Miesfeld
>
>
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


Re: [Oorexx-devel] Fwd: [No Reply] False Positive submission (3393192)

2014-01-21 Thread Oliver Sims
Have just tried re-download. It worked fine. Semantic must have OK'd the
file name as you suggested.
Many thanks. (Why didn't I try contacting Symantec myself? Doh!)
 
--
Oliver Sims
 

  _  

From: Mark Miesfeld [mailto:miesf...@gmail.com] 
Sent: 21 January 2014 17:58
To: ooRexx Dev List
Subject: [Oorexx-devel] Fwd: [No Reply] False Positive submission (3393192)


Here is the submission report for 3393192.  I couldn't find it at first or I
would have forwarded if first. 

As you can see here, the file I submitted had a different file name.  Which
is why I think their "correction" may have been file name based.

--
Mark Miesfeld


-- Forwarded message --
From: 
Date: Sun, Dec 15, 2013 at 4:10 PM
Subject: [No Reply] False Positive submission (3393192)
To: miesf...@gmail.com


Thank you for contacting Symantec.

Your submission has been received and will be reviewed. We endeavor to
respond to all submissions within 2 working days.

The tracking number for your submission is: 3393192, please reference this
tracking number in any further correspondence on this issue.

Your submission:
-
  When did the detection you are reporting occur? = DOWNLOAD
  Which product were you using when you saw this? = NIS
  Which of the following types of detection are you reporting? =
AUTO-PROTECT

  Name (person to contact) = Mark Miesfeld
  Email address = miesf...@gmail.com
  Are you the creator or distributor of the software in question? = yes

  File being uploaded = oorexx420_9716-x86_32.exe
  Download (or blocking) URL =

  Name of the software being detected = oorexx420_9716-x86_32.exe
  Name of detection given by Symantec product = Suspicious.Cloud.9.A
  File hash or clipboard paste from product = This information has
disappeared.  Your instructions did no good.  I can not locate the event in
history.

  Additional notes or steps to reproduce the detection = The file uploaded
is a Windows installation file for ooRexx an open source project.  The
project is hosted on SourceForge: https://sourceforge.net/projects/oorexx/ I
am a developer and committer on the project.

I built the ooRexx interpreter and the installation package from scratch.  I
had Norton AntiVirus scan the package.  It reports no threats:

Scan Statistics:
Scan Start:
Local: 12/15/2013 2:55 PM
UTC: 12/15/2013 10:55 PM
Scan Time: 9 seconds
Scan Targets: C:\work.ooRexx\wc\main.4.2.0\ooRexx420_9716-x86_32.exe
Counts:
Total items scanned: 1
- Files & Directories: 1
- Registry Entries: 0
- Processes & Start-up Items: 0
- Network & Browser Items: 0
- Other: 0
- Trusted Files: 0
- Skipped Files: 0

Total security risks detected: 0
Total items resolved: 0
Total items that require attention: 0

Resolved Threats:
No risks have been resolved

Unresolved Threats:
No unresolved risks

When I go to upload the file to SoureceForge as soon as the file open dialog
appears and I navigate to the correct folder Norton AntiVirus puts up a red
alert box saying it is processing a threat.  Then it automatically deletes
it.

It did the same thing when I used the Choose File button on this page.  I
then used the exclude button on the threat processing page to exclude the
file so I could upload it here.  Now the event from history has disappeared.
And even though I set all exclusions to none and none are listed when I go
to upload the file to SourceForge it no longer produces an alert.

Ive been fooling with this for 2 days.  Yesterday afternoon when I first got
the alert. I did a complete computer scan and besides tracking cookies no
threats were found.  I did a second complete scan overnight again no
threats.  It then did a complete clean of the build and built the package
immediately scanned it and then immediately tried to upload it.  Got the
threat notice.

I know there is no virus in the code base and I dont see how the executable
could have got infected in such a short time.  I dont understand how using
Norton AntiVirus to to scan the file can produce a no threat report and then
trying to upload the file produces a threat warning.

I dont see how two complete computer scans by Norton AntiVirus can say all
threats resolved then doing a clean build of the executable can end up with
an executable that Norton says is infected.

It seems to me this has to be a false positive.

Thanks for your time.

-

Sincerely,
Symantec Security Response
http://securityresponse.symantec.com

This message (including any attachments) is intended only for the use of the
individual or entity to which it is addressed and may contain information
that is non-public, proprietary, privileged, confidential, and exempt from
disclosure under applicable law or may constitute as attorney work product.
If you are not the intended recipient, you are hereby notified that any use,
dissemination, distribution, or copying of this communication is strictly
prohibited. If you have received this communication in error, notify us
immediately by telephone and (i) destroy this message if a fac

[Oorexx-devel] Fwd: [No Reply] False Positive Submission [3415563]

2014-01-21 Thread Mark Miesfeld
Here is Symantec's reply to the submission of
 ooRexx-4.2.0.windows.x86_32.exe, saying yes it was a false positive.

--
Mark Miesfeld

-- Forwarded message --
From: Symantec FP Incident Response 
Date: Tue, Jan 21, 2014 at 7:01 PM
Subject: [No Reply] False Positive Submission [3415563]
To: miesf...@gmail.com


In relation to submission [3415563].

Upon further analysis and investigation we have verified your submission
and as such this detection will be removed from our products.

The updated detection will be distributed in the next set of virus
definitions, available via LiveUpdate or from our website at
http://securityresponse.symantec.com/avcenter/defs.download.html

Decisions made by Symantec are subject to change if alterations to the
Software are made over time or as classification criteria and/or the policy
employed by Symantec changes over time to address the evolving landscape.

If you are a software vendor, why not take part in our whitelisting program?
To participate in this program, please complete the following form:
https://submit.symantec.com/whitelist


Sincerely,
Symantec Security Response
http://securityresponse.symantec.com

This message (including any attachments) is intended only for the use of
the individual or entity to which it is addressed and may contain
information that is non-public, proprietary, privileged, confidential, and
exempt from disclosure under applicable law or may constitute as attorney
work product. If you are not the intended recipient, you are hereby
notified that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone and (i) destroy
this message if a facsimile or (ii) delete this message immediately if this
is an electronic communication. Thank you.
--
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel