03-15-2011 05:08 PM
Here in Australia wednesday 16, got up first thing this morning and opened the world of warcraft launcher and it started downloading an "updated tools" which happens quite often and is usually only a few MB at most and in 3 years of using NIS and playing wow norton detected this as a suspicious activity and REMOVED! the file, fixing it was simply a matter of clicking on "show details" in the little red warning box in the lower right corner of vista 64 bit that popped up and selecting options and restore and exclude this file from further action.
While I have easily fixed this I thought the people at norton should know that the launcher has installed an updated tools dozens of times and this is the first time this has happened.
03-15-2011 05:38 PM
Hey!
Thanks for letting us know. We are aware of the issue and working on a fix. Can you please confirm if the file has a valid digital certificate on it? The files we are seeing dont have a valid digital cert! We are trying to contact Blizzard to hear what they have to say, but have not heard back from them.
Right click on the file, click properties, click digital signatures tab, select the signature and click Details. We are seeing "This digital signature is not valid".
Your help is very much appreciated.
Thanks in advance.
Cheers
03-15-2011 06:08 PM
I'm having the same problem. It says that the digital signature is not valid so that might be part of the problem
03-15-2011 08:51 PM
Same here and I can't get it to work at all.
03-15-2011 10:19 PM - edited 03-15-2011 10:19 PM
My problem is I can't even restore the file there's no option to it went straight to Unresolved Security Risks and wants me to restart there's no restore at all.
03-16-2011 05:33 AM
Same problem here and it's not the first time this has happened. I have to turn off SONAR to allow the update to complete.
03-16-2011 09:10 AM
Guys just turn off Sonar, / smart firewall during update. Thats what I did, then go to quarantine and restore any files with " wow" in them.
Worked for me.
03-17-2011 02:11 PM
All: Apologies for the inconvenience caused. We do monitor and react to FPs as quick as we can. As I reported earlier to this thread..we saw the issue very early on but were amazed by the fact that the binary had an invalid digital cert from blizzard on it .. which is very common with malware these days. We have now resolved the issue and should no longer be a problem. We also notified Blizzard about the issue.
We would recommend that you turn SONAR ON if you had turned it off ... it does indeed have great value in terms of protection it offers.
04-30-2011 07:59 AM
Hi,
I am not getting this same issue with, what appears to be a new tools update from WOW.
Can you please check?
Thanks,
