JJK Posted February 6, 2021 Report Posted February 6, 2021 This morning around 7:04am I received a virus notification from Norton that a Heur.AdvML.B virus was found for file EnpassStartup.exe. As a result, Norton removed this file and I'm now unable to run Enpass. Can anyone advise how I can resolve this so I can use Enpass again?
MilesTEG Posted February 6, 2021 Report Posted February 6, 2021 I've got a same problem with Bitdefender : EnPass infected by a virus on windows10 ? - Windows 10 (Store) - Enpass Forum
TimD Posted February 6, 2021 Report Posted February 6, 2021 28 minutes ago, MilesTEG said: I've got a same problem with Bitdefender : EnPass infected by a virus on windows10 ? - Windows 10 (Store) - Enpass Forum Me too, also Bitdefender. Just received the flag 30 minutes ago after booting up. It's a Microsoft Store installation The file C:\Program Files\WindowsApps\SinewSoftwareSystems.EnpassPasswordManager_6.52.724.0_x86__fwdy0m65qb6h2\EnpassStartup\EnpassStartup.exe is infected with Gen:Suspicious.Cloud.4.auW@aKCZu9ai and was moved to quarantine. 28 minutes ago, MilesTEG said:
Rudi Posted February 6, 2021 Report Posted February 6, 2021 (edited) Me too. Windows 10 Store Update to V6.6 The traditional version seems to be ok, scanned by NORTON. ENPASS team we ask for an official statement!! Edited February 6, 2021 by Rudi
ThoKich Posted February 6, 2021 Report Posted February 6, 2021 (edited) I have the same Trojan Virus Message in Norton.ENPASS team we ask for an official statement!! Edited February 6, 2021 by ThoKich
Rudi Posted February 6, 2021 Report Posted February 6, 2021 Noch hoffe ich, dass es ein Fehlalarm von Norton ist.
Rudi Posted February 6, 2021 Report Posted February 6, 2021 In 2019 it was a false alarm. Keep my fingers crossed that this time it will be the same again. Especially with a file from the Windows Store. But also Ccleaner has caught it once so :-(
UnknownVictim Posted February 7, 2021 Report Posted February 7, 2021 Same here. Norton 360 is reporting... ================================= Filename: EnpassStartup.exe Threat name: Heur.AdvML.BFull Path: C:\Program Files\WindowsApps\SinewSoftwareSystems.EnpassPasswordManager_6.60.770.0_x86__fwdy0m65qb6h2\EnpassStartup\EnpassStartup.exe ____________________________ ____________________________ On computers as of 2/6/2021 at 5:49:00 PM Last Used 2/6/2021 at 5:51:00 PM Startup Item No Launched No Threat type: Heuristic Virus. Detection of a threat based on malware heuristics. ____________________________ EnpassStartup.exe Threat name: Heur.AdvML.B Locate Many Users Thousands of users in the Norton Community have used this file. New This file was released 12 days ago. High This file risk is high. ____________________________ Source: External Media Source File: EnpassStartup.exe ____________________________ File Actions File: C:\Program Files\WindowsApps\SinewSoftwareSystems.EnpassPasswordManager_6.60.770.0_x86__fwdy0m65qb6h2\EnpassStartup\ EnpassStartup.exe Removed ____________________________ File Thumbprint - SHA: e365e7844891cf58fa9d9bd4e12cd02fe6704707876d36844e3c993443c57f5a File Thumbprint - MD5: f119c88913ea859e2a13ff78b20af5c2 ================================= Really need to Enpass Technologies Inc. to provide a response and course of action for resolution. Thank you!
Rudi Posted February 7, 2021 Report Posted February 7, 2021 (edited) @Pratyush Sharma Any idea to this matter? I am very concerned about this matter and require a response from Enpass NOW. IT'S ABOUT OUR PASSWORDS. Edited February 7, 2021 by Rudi
Pratyush Sharma Posted February 8, 2021 Report Posted February 8, 2021 Hi All, Sorry for the inconvenience caused to you. It is a heuristics based detection by the Antivirus and most certainly a false positive. This executable is used to launch Enpass on system startup. It is perfectly safe to use. We have submitted a ticket to the concerned team in Norton and other Antivirus. Once they correct it from their end, you won't see this message anymore. Thanks!
Rudi Posted February 8, 2021 Report Posted February 8, 2021 @Pratyush Sharma Thank you very much for your feedback. That relaxes me a bit. It would be nice if you could post the answer from Norton or Bitdefender that there is indeed no virus in the exe.
Morpheus2010 Posted February 17, 2021 Report Posted February 17, 2021 (edited) On 2/8/2021 at 7:42 AM, Pratyush Sharma said: Hi All, Sorry for the inconvenience caused to you. It is a heuristics based detection by the Antivirus and most certainly a false positive. This executable is used to launch Enpass on system startup. It is perfectly safe to use. We have submitted a ticket to the concerned team in Norton and other Antivirus. Once they correct it from their end, you won't see this message anymore. Thanks! OK, but it´s not solving the complete problem. I restored the file from the Norton quarantine but Norton has stored the file not in the right folder. And the folder where it should be is not exisiting anymore. Result: Autostart of enpass is not working. How i can fix this? Update: OK the folder exist, only viewable when i change the view options in Explorer (hidden/system). But the folder is restricted, i give me full rights to the folder but i can´t copy the EnpassStartup.exe to the folder. Edited February 17, 2021 by Morpheus2010 Update
Bleeddragon Posted March 7, 2021 Report Posted March 7, 2021 Is it possible to restore the file from the carantine without risk? Has anyone already done this without risk? Greetings to the team
Garima Singh Posted March 12, 2021 Report Posted March 12, 2021 Hey @Bleeddragon We apologize for the delayed response. Quick solution to resolve this issue is to reinstall Enpass on the same device. Before reinstalling, make sure you have taken the backup of Enpass data and save it locally. Thanks!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now