• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

TouchAble Installer: False Positive? Norton Security with Backup

Hello everybody,

I would like to know if the following file can be verified as an actual virus or if it is a false positive:

http:// dl . touch - able(dot)com/touchAble _ 313a - x64(dot)exe

The file can be located at the host website:

http:// www . touch - able(dot)com/

It is an installer file. It is supposed to install a server application on a Windows 10 PC running the x64 architecture. The server program will communicate with the popular TouchAble app, developed for the iOS ecosystem, that allows for wireless iPad control of the Ableton Live 9 Suite Digital Audio Workstation, or DAW.

Interestingly enough, Norton identifies the x64 installer as a heuristic virus, while it finds no threat with the x86 installer file. (The x86 installer won't run on my PC. Otherwise I would have used that one instead.)

Any and all help is appreciated. Thanks.

Replies

Accepted Solution
Kudos0

Re: TouchAble Installer: False Positive? Norton Security with Backup

Kudos0

Re: TouchAble Installer: False Positive? Norton Security with Backup

Firs of all, the company should contact Qihoo in the same time. See this VT report. My upload was detected as SAPE.Heur.BB1D5 by Symantec as well.

I tested said touchAble_313a-x64.exe (MD5, d2cdfb869d6041d976b83a9745ad9725 ) on a Win 7 Pro computer: at least, the Windows (64 bit) app is an iTunes based item.

Question #1 is, when I ran the installer, UAC told me of the following alert, "Unknown publisher".

the (possible) #2 is, a regular user would run into trouble when trying to uninstall touchAble completely. An extra project teVirtualMIDI64 from Tobias Erichsen was installed without clear notification. Its name can be detected during the install process.

Personally, the coder(s) can adjust or change the communication between client and server, such as some specific protocol. See the following GUI (Reinstall touchAble scripts) for future references. Please feel free to correct me. :)

PS: For more, plz read https://www.symantec.com/security_response/sape/ "Category: Security Risk or Misleading Application"@ SAPE Detections

PUP Hunter PRO: Just TRYING to save the world (U) from cyber threats, A single blog post, at a time, and ONCE & FOR ALL. (A fan of Nadia_Kovacs)
Kudos0

Re: TouchAble Installer: False Positive? Norton Security with Backup

Filename: touchAble_313a-x64.exe
Identified 6/5/2016 at 8:26:58 AM
Few Users
Fewer than 50 users in the Norton Community have used this file.
New
This file was released 9 days ago.
Trusted
Norton has given this file a trusted rating.
http: //dl. touch-able. com/touchAble_313a-x64. exe
Downloaded File touchAble_313a-x64.exe from touch-able.com
File Thumbprint - SHA:
3e4eb76f163095ad5153cafaa823c257de01d525e3fb801d82b7d92325395f5e

This thread is closed from further comment. Please visit the forum to start a new thread.