This forum thread needs a solution.
Kudos0

Cyberghost Dashboard

Posted: 15-Apr-2022 | 1:45PM · Edited: 15-Apr-2022 | 1:47PM · 17 Replies ·

Today, I tried to access my VPN, cyberghost, but was alerted by Norton 360 that it's blocking access to Cyberghost's dashboard.exe (from which you launch a connection and whatnot). I opted to "Fix" the issue, thus removing cyberghost and pretty much any executable files. Re-installing from Cyberghost was a bit annoying, but successful. Upon opening it again, norton blocked access again.

Here is what I'm seeing on my end:

Filename: Dashboard.exe
Threat name: PUA.SuperflussFull Path: C:\Program Files\CyberGhost 8\Dashboard.exe

____________________________

____________________________


On computers as of
4/15/2022 at 4:03:33 PM

Last Used
4/15/2022 at 4:03:33 PM

Startup Item
Yes

Launched
No

Threat type: Security Risk. Programs that pose a security or privacy risk and are not already classified as malicious.
____________________________
Dashboard.exe Threat name: PUA.Superfluss
Locate
Many Users
Tens of thousands of users in the Norton Community have used this file.

New
This file was released 29 days ago.

Low
This file risk is low.
____________________________
Source: External Media
____________________________

File Actions

CyberGhost 8\ Dashboard.exe Blocked

Does anyone have any guidance for me regarding the use of Cyberghost? Is this a real threat or an over-reaction by Norton? I've been using both Cyberghost VPN AND Norton together for 2 years without issue. Is this perhaps a strategy to get me to use their VPN?

Labels: Application Blocking

Replies

Kudos1 Stats

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 1:56PM · Permalink

Maybe, Norton does not like VPNs?
https://community.norton.com/en/forums/ivacy-vpn

Kudos0

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 2:00PM · Edited: 15-Apr-2022 | 2:20PM · Permalink

as test:  

https://www.cyberghostvpn.com/en_US/vpn-free-trial

Kudos0

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 2:03PM · Edited: 15-Apr-2022 | 2:16PM · Permalink 

Filename: cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe
Threat name: PUA.SuperflussFull Path: C:\bjm\Edge\user\current\Desktop\cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe

On computers as of 
4/15/2022 at 4:57:12 PM

Last Used 
4/15/2022 at 4:57:12 PM

Threat type: Security Risk. Programs that pose a security or privacy risk and are not already classified as malicious.

cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe Threat name: PUA.Superfluss
Locate

Many Users
Hundreds of thousands of users in the Norton Community have used this file.

Mature
This file was released 1 year 10 months ago.

Low
This file risk is low.

https://www.cyberghostvpn.com/download/cg8/cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe
Downloaded File  from cyberghostvpn.com
Source: External Media

cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe

File Actions

Infected file: C:\bjm\Edge\user\current\Desktop\ cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe No fix attempted

File Thumbprint - SHA:
5777332574dc37c23aca84e134e44eb6179d15583978bded59d8f8cf5f17e246
File Thumbprint - MD5:
66f199a3b35535fde1c01da9425ce678

====================================================

Filename: cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe
Full Path: C:\Users\bjm\Desktop\cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe

Developers 
CyberGhost S.R.L.

Version 
4.0.2.9

Identified 
4/15/2022 at 5:09:20 PM

Many Users
Hundreds of thousands of users in the Norton Community have used this file.

Mature
This file was released 1 year 10 months ago.

Bad
There are many indications that this file is untrustworthy.

Source File:
cgsetup_en_C7DXdmDgkTir6BfYB2Ed.exe

File Thumbprint - SHA:
5777332574dc37c23aca84e134e44eb6179d15583978bded59d8f8cf5f17e246
File Thumbprint - MD5:
66f199a3b35535fde1c01da9425ce678

VirusTotal [here]

Kudos1 Stats

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 2:07PM · Permalink

Report a suspected incorrect detection to Norton
https://support.norton.com/sp/en/us/home/current/solutions/v126152382

Submit a file to Norton
https://support.norton.com/sp/en/us/home/current/solutions/kb20090602171902EN

Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832EN

Please tell us what Norton is telling you regarding this event.
For information regarding this event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste here.

For second opinion choose File &/or Search hash at VirusTotal 

Kudos0

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 2:20PM · Edited: 15-Apr-2022 | 2:22PM · Permalink

But why is Norton suddenly flagging this as problematic? Like I mentioned in original post, I've had and used both services concurrently for years.

Interestingly, the setup file I downloaded was deemed safe when I scanned it, though that does not seem to be your experience (@bjm)

Kudos0

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 2:29PM · Edited: 15-Apr-2022 | 3:23PM · Permalink

__JG:

But why is Norton suddenly flagging this as problematic? Like I mentioned in original post, I've had and used both services concurrently for years.

Interestingly, the setup file I downloaded was deemed safe when I scanned it, though that does not seem to be your experience (@bjm)

No idea...why Norton is suddenly flagging. 
No idea...your setup file download source.  

I'm trying to reproduce....to see detection.   
Sorry, I'm not familiar with C:\Program Files\CyberGhost 8\Dashboard.exe

I'm trying to launch free trial setup, now. 

Kudos0

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 2:39PM · Edited: 15-Apr-2022 | 2:40PM · Permalink

as test:  tried another download 

https://www.cyberghostvpn.com/en_US/vpn-free-trial


Kudos0

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 2:47PM · Edited: 15-Apr-2022 | 2:55PM · Permalink

as test:
I had to allow CyberGhost thru Smart Firewall and Exclude - PUA.Superfluss

Filename: Dashboard.exe
Full Path: C:\Program Files\CyberGhost 8\Dashboard.exe

Developers 
CyberGhost S.R.L.

Version 
8.3.5.9052

Identified 
4/15/2022 at 5:42:36 PM

Many Users
Tens of thousands of users in the Norton Community have used this file.

New
This file was released 29 days ago.

Bad
There are many indications that this file is untrustworthy.

Source File:
Dashboard.exe

File Thumbprint - SHA:
20509f5c91c2fe427f1a2fedea238519e7f2f1d7b9a05230c6b9fd37877d18da
File Thumbprint - MD5:
167a72c3a1bc23b485230c62e839c9b0

VirusTotal [here]

Kudos0

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 3:15PM · Edited: 15-Apr-2022 | 3:20PM · Permalink

Provide file hash:  Filename: Dashboard.exe
https://submit.norton.com/?type=CHECK&submission_id=4edb4131-3391-4f26-8bae-02bef7de4e56

Upload a file:  Filename: Dashboard.exe
https://submit.norton.com/?type=CHECK&submission_id=869e81d3-4145-4f83-84e1-a91927775e12

Kudos0

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 3:35PM · Edited: 15-Apr-2022 | 3:44PM · Permalink

Dashboard.exe calls

https://www.cyberghostvpn.com/en_US/terms

https://www.cyberghostvpn.com/en_US/privacypolicy

Kudos1 Stats

Re: Cyberghost Dashboard

Posted: 15-Apr-2022 | 6:12PM · Permalink

What is a PUA (Potentially Unwanted Application) or PUP (Potentially Unwanted Program)?
https://us.norton.com/internetsecurity-malware-what-are-puas-potentially-unwanted-applications.html

Kudos0

Re: Cyberghost Dashboard

Posted: 18-Apr-2022 | 12:33PM · Edited: 18-Apr-2022 | 12:37PM · Permalink

Submission status:   Your submission is being processed ... at this time
https://community.norton.com/en/comment/8527000#comment-8527000

Kudos0

Re: Cyberghost Dashboard

Posted: 21-Apr-2022 | 12:39PM · Edited: 21-Apr-2022 | 12:45PM · Permalink

VirusTotal [here]

VirusTotal [here]

Submission status:   Your submission is being processed ... at this time
https://community.norton.com/en/comment/8527000#comment-8527000

Kudos0

Re: Cyberghost Dashboard

Posted: 06-May-2022 | 6:15PM · Permalink

Submission status:   Your submission is being processed ... at this time
https://community.norton.com/en/comment/8527000#comment-8527000

Kudos0

Re: Cyberghost Dashboard

Posted: 07-May-2022 | 3:57AM · Permalink

I noticed that after the takeover of Symantec by Lifelock Inc Norton 360 began to be problematic. Not good. 

Kudos0

Re: Cyberghost Dashboard

Posted: 07-May-2022 | 8:10AM · Permalink

Just an FYI. Symantec purchased Lifelock. Then Broadcom purchased Symantec. At this point, Norton was split off into a separate business unit.

Kudos0

Re: Cyberghost Dashboard

Posted: 07-May-2022 | 3:19PM · Permalink

peterweb:

Just an FYI. Symantec purchased Lifelock. Then Broadcom purchased Symantec. At this point, Norton was split off into a separate business unit.

Broadcom produces semiconductors. Why did she buy Symantec? Symantec could work alone. But this is probably about business interests and money. Cash cash cash. 

This thread is closed from further comment. Please visit the forum to start a new thread.