php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Sec Bug #71585 php-win.exe deleted by Norton Security
Submitted: 2016-02-13 18:49 UTC Modified: 2016-02-28 04:22 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:1 (100.0%)
From: jim at joc dot co dot uk Assigned:
Status: No Feedback Package: Unknown/Other Function
PHP Version: 7.0.3 OS: Windows 10
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2016-02-13 18:49 UTC] jim at joc dot co dot uk
Description:
------------
Norton Security deleted php-win.exe file and reported as follows:

Filename: php-win.exe
Threat name: WS.Reputation.1Full Path: c:\php7\php-win.exe

____________________________

____________________________


On computers as of 
13/02/2016 at 15:31:42

Last Used 
13/02/2016 at 18:21:03

Startup Item 
No

Launched 
No

Threat type: Insight Network Threat. There are many indications that this file is untrustworthy and therefore not safe


____________________________


php-win.exe Threat name: WS.Reputation.1
Locate


Few Users
Fewer than 100 users in the Norton Community have used this file.

New
This file was released 10 days ago.

Medium
This file risk is medium.


____________________________


Source: External Media

Source File:
php-win.exe

____________________________

File Actions

File: c:\php7\ php-win.exe Removed
____________________________


File Thumbprint - SHA:
33b5f8a8d3e468b03089ca9c289ae3e6bfff7d738c42b298d18a923427928a5b
File Thumbprint - MD5:
Not available



Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2016-02-14 20:50 UTC] ab@php.net
-Status: Open +Status: Feedback
 [2016-02-14 20:50 UTC] ab@php.net
Thanks for the report. Some false positives are lately being observed with the PHP7 bins, while there is no real base for concerns proved. Fe

https://www.virustotal.com/en/url/2606e0cc8fc46401c49ab3dfa0d8ca8a874b660a8d0c486b63eb027e435c79d9/analysis/

Fe Symantec reports green here, while there is one vietnam antivirus still reports something. I would kindly ask you to start the conversation with Symantec, to clear out what the exact reasons are. Also please check your bases are up to date. The description provided here https://www.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854-99&tabid=2 doesn't help to understand what the exact issue is, and the OSes listed are not supported since PHP 5.5.

Thanks you.
 [2016-02-28 04:22 UTC] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
 
PHP Copyright © 2001-2022 The PHP Group
All rights reserved.
Last updated: Sat Dec 03 20:05:54 2022 UTC