Page 1 of 1

mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

Posted: Sun Dec 04, 2016 9:25 pm
by OverLander
Hello,

I'm new here ... I'm just revamping my Arcade Cab with new Hardware, Emus and Frontend.

I've gone with Premium mGalaxy and all was going well in setup until my AV software told me that Runway
was infected with SAPE.Heur.A0707 Trojan.

Any ideas if this is a false positive ... ?

Thanks

Jon

Re: mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

Posted: Sun Dec 04, 2016 11:46 pm
by OverLander
Also................

I've been running latest Mame64 release (all day long)  on Win10 64 Bit OS ...

I have just come back to the PC and Mame wont load ..

Anyone else had this scenario ?

Thanks

Re: mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

Posted: Mon Dec 05, 2016 4:22 pm
by Aeliss
For the virus alert, I prefer mGalaxy confirm you it's a false positive, but for the mame problem, if you run just the executable, it's works ? (without rom selection).

The better way I have found for mame problems (and I have lot of problem with it, too), it s install a fresh version in an other folder, and copy/paste all files one by one (you can make folder by folder) up to find the corrupted file.

Re: mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

Posted: Tue Dec 06, 2016 5:00 pm
by mgalaxy
[quote="OverLander"]
I've gone with Premium mGalaxy and all was going well in setup until my AV software told me that Runway
was infected with SAPE.Heur.A0707 Trojan.

Any ideas if this is a false positive ... ?
[/quote]

Yes, it's a false positive!
You can check by yourself on VirusTotal. Here's the report I get when submitting Runway:
https://www.virustotal.com/fr/file/acaa ... 481043243/
It appears that it is indeed reported as infected by 2 companies..out of 56 companies...you can run it without fear!
I contact Symantec to see what can be done about it!

Re: mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

Posted: Tue Dec 06, 2016 10:20 pm
by OverLander
Great thanks for the feedback ????

Re: mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

Posted: Tue Dec 06, 2016 10:32 pm
by OverLander
Now I need to sort the Mame problem out ....

Seems that if I install Win10 then run Mame it's ok until Win10 auto updates ...
Then it's a black screen on Mame startup ..

I've reinstalled Win10 and will keep it offline and see if that stops Mame from crashing ..

I'll just have to add mGalaxy via USB stick from another device for now ..

Want to sort it out tho so that I can connect the Uright Cab to my network ..

Anyone else using Win10 64bit with Mame0180/64 and experienced this crash ?

Re: mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

Posted: Wed Dec 07, 2016 8:42 am
by mgalaxy
Symantec has replied to my request, analysed the file and removed it from their "infected files" database
In relation to submission 11369.

Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:

    File name: mGalaxy_Runway.exe
    MD5: d3fb3b784bb27e3d5e387f4857c5cff0
    SHA256: acaa8a44e57072a63f57e6250fac33aaa64fe15606ece4724e8116ae9e051afe
    Note: Whitelisting is available by downloading a RAPID RELEASE indicated in the Further Information section below or via the next Live Update

Further Information:
Required RAPID RELEASE sequence >= 182245

The latest Rapid Release definition available here: ftp://ftp.symantec.com/AVDEFS/norton_an ... pidrelease
https://www.virustotal.com/fr/file/acaa ... 481099959/

Re: mGalaxy Runway deleted by Anti Virus software - SAPE.Heur.A0707

Posted: Wed Dec 07, 2016 4:44 pm
by OverLander
Seems that a fresh install of win10 on a formatted disk will allow Mame to load but after a reboot
it wont run.

Here is the event log from Event Viewer if anyone can advise ?

Thanks

Jon

Faulting application name: mame64.exe, version: 0.180.0.0, time stamp: 0x058402e0
Faulting module name: mame64.exe, version: 0.180.0.0, time stamp: 0x058402e0
Exception code: 0xc0000005
Fault offset: 0x000000000165d779
Faulting process ID: 0xe5c
Faulting application start time: 0x01d250a1b062e202
Faulting application path: C:\Users\Arcade\Desktop\Mame\mame64.exe
Faulting module path: C:\Users\Arcade\Desktop\Mame\mame64.exe
Report ID: 6ba6ec8b-cfb5-4c33-8ecc-c4231efb0412
Faulting package full name:
Faulting package-relative application ID: