Xoroshiro v1.0 wus flagged as infected with Trojan Horse by Norton!

Message boards : Number crunching : Xoroshiro v1.0 wus flagged as infected with Trojan Horse by Norton!
Message board moderation

To post messages, you must log in.

AuthorMessage
Drago75

Send message
Joined: 13 Oct 20
Posts: 12
Credit: 101,461,591
RAC: 3,964,452
Message 1080 - Posted: 4 Apr 2025, 8:55:29 UTC

I just tried to run Xoroshiro on one of my Windows machines with Norton Securities installed. Immediatly after download of the wus it flagged "xoroshigo2_wrapper_1.02_windows_x86_64.exe" as infected by "Win64:Evo-gen [Trj]". My other Windows machines protected by Windows Defender didn't report such a problem yet It may be nuisance
ID: 1080 · Report as offensive     Reply Quote
ahorek's team

Send message
Joined: 14 Jan 25
Posts: 2
Credit: 365,000
RAC: 15,546
Message 1082 - Posted: 4 Apr 2025, 13:03:13 UTC - in response to Message 1080.  
Last modified: 4 Apr 2025, 13:04:08 UTC

The Evo-gen part of the name suggests that it is detected using heuristic analysis or machine learning, rather than a specific virus signature. Some safe programs may trigger this detection just because they look suspicious. There's not much authors can do about it except report it to Norton as a false positive. It's a never-ending fight.

AI heuristics can identify threats more quickly but often produce false positives. If you're unsure, you should double-check it with a different software
https://www.virustotal.com/gui/file/dc0be068da2d0550f2acf4b45e86dd99b84b4c9bbefa3a132ed773390e6189de?nocache=1

As you can see, only 3 out of 72 reports indicate a POTENTIAL threat, and all three were detected by AI. If you see a report like this, it's almost always a false positive.
ID: 1082 · Report as offensive     Reply Quote
Drago75

Send message
Joined: 13 Oct 20
Posts: 12
Credit: 101,461,591
RAC: 3,964,452
Message 1084 - Posted: 4 Apr 2025, 13:39:29 UTC - in response to Message 1082.  

Thanks for the info! Will report it next time to Norton as false positive.
ID: 1084 · Report as offensive     Reply Quote

Message boards : Number crunching : Xoroshiro v1.0 wus flagged as infected with Trojan Horse by Norton!