y u virus us Tom n Lummox, not nice.

ID:796533
 
Jun 4 2012, 4:41 am (Edited on Jun 4 2012, 4:47 am)

Poll: tom n lummox keylogging

ya 44% (12)
na 55% (15)

Login to vote.

Full Path: c:\users\****\downloads\495.1136_byond.exe
____________________________
____________________________
On computers as of:
6/4/2012 at 9:36:40 PM
Last Used:
6/4/2012 at 9:39:02 PM
Startup Item:
No
Launched:
No
____________________________
____________________________
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
____________________________
Medium
This file risk is medium.
____________________________
Threat Details
Threat type: Insight Network Threat. There are many indications that this file is untrustworthy and therefore not safe
____________________________
Origin
Downloaded from http://www.byond.com/download/build/495/495.1136_byond.exe
http://www.byond.com/download/build/495/495.1136_byond.exe Downloaded File 495.1136_byond.exe
(WS.Reputation.1) from: byond.com


495.1136_byond.exe
____________________________
File Actions
File: c:\users\****\downloads\495.1136_byond.exe
Removed
____________________________
File Thumbprint - SHA:
905e6ef2720540a723b5e499f4172a4d4d997922ccbca825534b9e8ca763 823a
____________________________
File Thumbprint - MD5:
e552ed8bf898fd5c91c45ad3df4b618b
____________________________






Care to explain? Norton won't even let me undo this action due to how risky it is. o-o


Edit: Once I disabled my norton, the one I already got installed started working again. [It didnt work before.] I allowed it on firewall and all, I even double checked. Still using older version due to issue above.
#1 Jun 4 2012, 4:59 am
It's only complaining about 495? That is odd since it didn't have many changes from 494; mainly some minor bug fixes.
#2 Jun 4 2012, 5:01 am
Mhmm. I've had Norton on this pc for ages. First time it mention BYOND.
#3 Jun 4 2012, 5:18 am
Norton don't like a lot of programs (about everything not in windows startup)
#4 Jun 4 2012, 5:45 am
I've noticed a common theme with all anti-virus packages that flag BYOND as suspicious, actually.

They all note that 'Very Few Users
Fewer than 5 users in the Norton Community have used this file.'
BYOND has very few users for each given anti-virus package, which is apparently enough to count as suspicious and pull the AV up to block it. Clearly, this is a bit silly, as not all obscure software is dangerous. I suspect it's that mixed with the fact BYOND has a lot of network traffic.

The Insight Network Threat stuff is the Norton Cloud, which is just full of generic virus and threat definitions, purposely designed to catch more things than the local definitions.
Have you turned it on recently, around the time it started causing problems with BYOND?
#5 Jun 5 2012, 12:08 am
My norton has always been on. I downloaded the BETA last time for that version, it had 1 user from the norton community, no issue. That thing made me really suspicious.
#6 Jun 5 2012, 12:36 am
Well, I don't know what to tell you. If we had a way of knowing what it was flagging, we could take a look. BYOND contains no malware and version 495 is just a few bug fixes that were exposed in 494 after public release.
#7 Jun 5 2012, 7:50 pm
Would the actual security report from Norton help?

I also had an issue with Norton, when testing my standalone. I put the "byond" install folder, DMB, RSC, and the EXE (Make EXE, using file://LetterBox.dmb##guest), in a self-extracting archive, set to unzip on the client's computer and run the EXE. Norton would flag this as a high-level risk and actually delete the extracted EXE before it ran.
#8 Jun 7 2012, 7:45 pm
I got a player complaining to me about this today.
I suggest anyone affected by it take the time to fill out
https://submit.symantec.com/false_positive/