topic Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch: in Norton Internet Security / Norton AntiVirus

Sonar is tripping on new World of Warcraft (WoW) patch:

Tsalagi — Tue, 02 Feb 2010 15:13:06 GMT

There is a new Wow patch today, during download I get a pop-up saying that this has performed a suspicious activity (see below). My questions are:

1. How do I stop the restart (which I am assuming will replace the file).

2. How can I put this on an ignore list?

Not Available
____________________________
____________________________
On computer as of
2/2/2010 at 6:47:44 AM
Last Used:
2/2/2010 at 6:48:22 AM
Startup Item: No
Launched: Yes
____________________________
____________________________
Very Few Users
Fewer than 10 users in the Norton Community have used this file.
____________________________
High
This file risk is high.
____________________________
Threat Details
SONAR Protection monitors for suspicious program activity on your computer.
____________________________
Origin

Downloaded from Not Available
____________________________
URL Not Available
UNTESTED

Source
wow-3.3.0.11159-to-3.3.2.11403-enus-patch.exe
____________________________
File Actions
File: c:\Users\Public\Games\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-enus-patch.exe
Restart Required
____________________________
File Thumbprint:
Not Available
____________________________

Re: Sonar is tripping on new World of Warcraft (WoW) patch:

dallas_maverick — Tue, 02 Feb 2010 17:04:02 GMT

try to create a new rule at Program Control .

eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

bill221 — Tue, 02 Feb 2010 22:09:53 GMT

ecactly the same problem. what can i do to fix this. please explain in terms a child could understand.

Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

Bombastus — Tue, 02 Feb 2010 22:23:14 GMT

I hope there is a fix tomorrow, when the patch is released here in Europe.

Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

bill221 — Tue, 02 Feb 2010 22:31:41 GMT

ive been at this since this morning. blizz says uninstall norton. or disable sonar. norton says dont.

neither is telling me anything and ive been on the phone with norton for 2 hours after i was hung up on the first time i called.

Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

Bombastus — Tue, 02 Feb 2010 22:36:42 GMT

Well, temporarily disabling Sonar during the patching process should work, right? I don't think you will need Sonar's detection capabilities to protect your system from harm during that short period of time, and the patch itself is guaranteed malware-free. When you re-enable Sonar after patching, I don't think it'll see the finished patched program as suspicious.

Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

bill221 — Tue, 02 Feb 2010 22:47:34 GMT

those are the questions ive been trying to get an answer to. the staff at blizz still say uninstall it or dont worry because its a "false positive". meanwhile, im still listening to hold music from norton after the first person couldnt answer my question and we got "disconnected"

Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

bill221 — Tue, 02 Feb 2010 23:00:11 GMT

i bought a dell computer a long time ago. when it had problems i call them to help. after 8 hours on the phone i never bought another dell computer. why would you ever waste hours of your life when you can just get a different program or game without headaches?

Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

floplot — Wed, 03 Feb 2010 03:32:58 GMT

If you have a file which you think is a false positive or you want it further analyzed, this is what you do.

Please use this link if you think that a file is a false positive: https://submit.symantec.com/dispute/false_positive/

If there is a possibility that the file might be infected, please submit it to Symantec using this link:

https://submit.symantec.com/websubmit/retail.cgi

Another alternative which is fast you can use Threat Expert:

http://www.threatexpert.com/submit.aspx

(Thanks to Yaso for providing the links)

Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

Bombastus — Wed, 03 Feb 2010 09:26:25 GMT

bill221 wrote:
those are the questions ive been trying to get an answer to. the staff at blizz still say uninstall it or dont worry because its a "false positive". meanwhile, im still listening to hold music from norton after the first person couldnt answer my question and we got "disconnected"

Of course it is not something malicious, being the official patch.

Re: eRe: Sonar is tripping on new World of Warcraft (WoW) patch:

Bombastus — Wed, 03 Feb 2010 10:10:50 GMT

Patched and ready. Just temporarily disable SONAR.

Re: Sonar is tripping on new World of Warcraft (WoW) patch:

terryleefr — Wed, 03 Feb 2010 14:36:59 GMT

And if it's too late and you already had the problem, just go into your recent history in NIS, from there you can unquarantine the patch installer and it will ask if you want to ignore this particular "threat" in the future. Start WOW, and the patch will apply and off you go.

Re: Sonar is tripping on new World of Warcraft (WoW) patch:

Barrett — Wed, 03 Feb 2010 17:59:38 GMT

Hey guys,

Sorry for the inconvenience. We are looking into the issue. However, if you restore the patch installer from quarantine, you should be able to run it without disabling SONAR.

_Barrett

Re: Sonar is tripping on new World of Warcraft (WoW) patch:

hchandless — Wed, 03 Feb 2010 18:29:30 GMT

After restored the file, the game runs ok, but everytime I leave the game and return to desktop the Norton screen pops up for no reason. No error or anything, just the UI comes up.

Re: Sonar is tripping on new World of Warcraft (WoW) patch:

Tim_Lopez — Wed, 03 Feb 2010 18:37:30 GMT

Hi hchandless,

We're looking in to that issue too. It is currently being discussed on this thread:

http://community.norton.com/t5/Norton-Internet-Security-Norton/NIS-2010-v17-5-0-127-UI-Full-Screen-Bug/td-p/196462