Hi,
I've been trying to update to 10.8 experimental version, however each time I download the Win 64bit version (installer or zip), Norton kills the factorio.exe due to detected threat: http://www.symantec.com/security_respon ... 08-1854-99
Anyone else seeing this?
10.8 windows 64bit Installer and zip eaten by Norton
Re: 10.8 windows 64bit Installer and zip eaten by Norton
Disable Norton while you download.
That link doesn't say Factorio has a virus, just that Norton has never seen the file before.
That link doesn't say Factorio has a virus, just that Norton has never seen the file before.
Re: 10.8 windows 64bit Installer and zip eaten by Norton
Oh yes.. it's just a warning.. turn it off since you want xxxxxDaveMcW wrote:Disable Norton while you download.
On the other hand... if these values are true, it's not doing much good anyway.
Also: they suggest that you should not turn norton off, but restore the file from the quarantineAntivirus Protection Dates
Initial Rapid Release version March 27, 2009
Latest Rapid Release version April 20, 2010 revision 025
Initial Daily Certified version March 27, 2009 revision 005
Latest Daily Certified version April 20, 2010 revision 024
Initial Weekly Certified release date April 1, 2009
That might have a positive effect on factorio's reputation, sparing other norton users from the trouble.REMOVING A FILE FROM QUARANTINE
It is possible to restore a file from quarantine to its previous location on your computer. This should only be done if you are certain that the file is not malicious. Symantec strongly recommend that you submit the file that was detected even if you choose to restore the file from quarantine.
Norton users
To learn how to restore a file from quarantine using Norton products, please read the following document:
Restoring an item from the Quarantine
Re: 10.8 windows 64bit Installer and zip eaten by Norton
It's likely that other norton users might have such issues too, but took the "disable" shortcut without reporting here.
@ http://www.symantec.com/security_respon ... 08-1854-99
Perhaps none of their users met factorio yet? Or their heuristics got confused by the rapid sub-release cycle?
If the count of affected norton users grows, there are links for whitelisting / disputing a blacklist too.
@ http://www.symantec.com/security_respon ... 08-1854-99
Perhaps none of their users met factorio yet? Or their heuristics got confused by the rapid sub-release cycle?
If the count of affected norton users grows, there are links for whitelisting / disputing a blacklist too.
That makes sense, since it'll tie all factorio versions (mutations, as they might see) to one certificate.http://submit.symantec.com/whitelist/ wrote:Note: To prevent false positive detections we strongly recommend vendors to digitally sign their software with a class 3 digital certificate.
Re: 10.8 windows 64bit Installer and zip eaten by Norton
Yesterday I was testing out an installer that claimed to be a "Driver Verifier", which was bundled with five other malware programs that threw up all sorts of fake errors and bombarded my test computer with adverts and warning windows. They were all asking for money (some a regular subscription) to fix all of the problems that they found. They hooked into the Internet Explorer and Firefox on my test system and changed the home page and default search engine and inserted banner adverts into searchesMF- wrote:That makes sense, since it'll tie all factorio versions (mutations, as they might see) to one certificate.http://submit.symantec.com/whitelist/ wrote:Note: To prevent false positive detections we strongly recommend vendors to digitally sign their software with a class 3 digital certificate.
Who had signed the installer for this problem - and many of the others that I test?
Re: 10.8 windows 64bit Installer and zip eaten by Norton
I suspect that signing might make it easier for the AV company to tell "new factorio version" from "infected factorio".
You say that virus makers sign their products? So what?
I thought anyone could buy a certificate and sign whatever she desires to.
You say that virus makers sign their products? So what?
I thought anyone could buy a certificate and sign whatever she desires to.