Norton Malware alert in the nrf Connect for SDK in the VS Code

[Claudio Rosa]

Good night,

I installed the VS Code/nrf Connect in my Windows 11 Prof.

I copied the "blink sample" and I tried to build it, but I am receiving 

* Executing task: nRF Connect: Generate config rak4631/nrf52840 for c:\Zephyr\minhas_aplic\blinky

Building blinky

****************************
* Running CMake for blinky *
****************************
FLASH: 22516 B 1 MB 2.15%
RAM: 7680 B 256 KB 2.93%
IDT_LIST: 0 GB 32 KB 0.00%

Generating files from C:/Zephyr/minhas_aplic/blinky/build/blinky/zephyr/zephyr.elf for board: rak4631
Acesso negado.
ninja: build stopped: subcommand failed.

FAILED: _sysbuild/sysbuild/images/blinky-prefix/src/blinky-stamp/blinky-build C:/Zephyr/minhas_aplic/blinky/build/_sysbuild/sysbuild/images/blinky-prefix/src/blinky-stamp/blinky-build

[Einar Thorsrud]

Hi,

This seems to be a problem with false positive in Norton. I am afraid we cannot do much about that on our end, but perhaps contact them?

[Claudio Rosa]

This is the list that what happended until now.

Do you believe that every item in the list are Norton "false positive"?  Does the Teams responsible for the nrf Connect SDK do a "virus/malwre scan" in the content before release it?

Well, I am not very confortable now but I putted the "c:\ncs\*" in the Norton Whitelist.  I would like to be sure that this nrf Connnect SDK is safe.  

I am waiting your answer.

Regards,

Claudio

[Einar Thorsrud]

I see. My only suggestion is disabling Norton while building and contacting Norton about these false positives so that they can look into it.

[Claudio Rosa]

I already did the Norton disable scan  for "C:\ncs\*", but you didn´t answer my question:  Do you scan for virus/malware before the content is released?

[Einar Thorsrud]

Hi,

Nordic does not scan for virus/malware. Toolchain comes directly from upstream Zephyr with some added nordic tools, and is zipped and published without any changes to the existing tools.

PS: For reference, only 3 of 72 tools flag riscv64-zephyr-elf-cpp.exe as suspissious.