• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Norton Download Insight removing files installed several years ago

For the last day or so Norton has been using every bit of CPU I had available, even while I've been actively using my computer, to the point I've had to disable tamper protection and limit it to one core.  Earlier tonight, I start seeing "Analyzing file.xyz" messages, which is a telltale sign that Download Insight is trying to delete something I've downloaded... But I hadn't downloaded anything.

It turns out that for some reason Norton was checking files in C:\Program Files (x86) (and I'd assume a lot of other places too) and analyzing them.  This is one of the files that was removed.  (This and OpenRCT2, a community-made mod for Roller Coaster Tycoon 2). After the second file, I killed the Norton process, since something wasn't working the way it was supposed to.

I'm a bit confused as to why a "low-risk" file would be removed by Download Insight, as I thought it only went after meduim- and high-risk files, typically those that have been newly released.  (Not to mention having no clue exactly what it was that triggered it, because of "Threat name: Unknown")  I'm also concerned as to why Norton's Download Insight is scanning my files like this, since I thought it was only supposed to scan newly-downloaded/added files, and do it only once.

Replies

Kudos0

Re: Norton Download Insight removing files installed several years ago

What does Copy to Clipboard report

Kudos0

Re: Norton Download Insight removing files installed several years ago

Filename: haloce.exe
Threat name: UnknownFull Path: c:\program files (x86)\microsoft games\halo custom edition\haloce.exe

____________________________

____________________________


On computers as of 
7/11/2014 at 20:48:23

Last Used 
7/20/2016 at 23:18:32

Startup Item 
No

Launched 
No

____________________________


haloce.exe Threat name: Unknown
Locate


Few Users
Hundreds of users in the Norton Community have used this file.

Mature
This file was released 2 years 2 months ago.

Low
This file risk is low.


____________________________


Source: External Media

Source File:
haloce.exe

____________________________

File Actions

Infected file: c:\program files (x86)\microsoft games\halo custom edition\ haloce.exe Access Denied
____________________________


File Thumbprint - SHA:
feea46fce285ec071016cf5534abe47ecf36f6cfac8f1973ee6919851ea5a037
File Thumbprint - MD5:
Not available
 

(waiting on the image to clear moderation, but this is the body of what it is)

edit: Trying to launch the application (as I know exactly what it is, where it came from, and know I can trust it) results in my security history coming up with a ton of "sample submission" entries. Could that have anything to do with it?

Kudos0

Re: Norton Download Insight removing files installed several years ago

File name: Halo
Detection ratio: 0 / 54
Analysis date: 2016-07-06

Please see > Norton 22.7 - Hot Issues and Fixes

For second opinion choose File and / or Search hash at VirusTotal and/or submit to Symantec for review analysis > see > How to report false positives

edit: Trying to launch the application (as I know exactly what it is, where it came from, and know I can trust it) results in my security history coming up with a ton of "sample submission" entries. Could that have anything to do with it?

Sorry, no idea whether CPU is related or a corrupt or new definition. 
What happens when you click Threat name: Unknown


google > https://social.technet.microsoft.com/Forums/azure/en-US/b3cbf11a-b709-4419-81f7-6e0b7b94362d/malware-name-unknown-threat-id-2147687823?forum=FCSNext

Kudos0

Re: Norton Download Insight removing files installed several years ago

When I click on Threat name: Unknown I get a 404 error page.  When I try to *launch* it I get the standard "WS.Reputation.1" threat, in a separate entry.

Kudos0

Re: Norton Download Insight removing files installed several years ago

Um, do you have Heuristic Protection on Aggressive.

Symantec WS.Reputation.1
http://www.symantec.com/security_response/writeup

Clarification on WS.Reputation.1 detection
https://community.norton.com/forums/clarification-wsreputation1-detection

Kudos0

Re: Norton Download Insight removing files installed several years ago

Nah, I'm on Automatic.

Kudos0

Re: Norton Download Insight removing files installed several years ago

xfullmetal17:  Nah, I'm on Automatic.

Yeah, just a reach since VirusTotal reports 0/54.  
Let us know how you progress.
Regarding CPU mentioned in opening post.
https://community.norton.com/en/comment/7085931#comment-7085931---
https://community.norton.com/en/comment/7088981#comment-7088981 --- https://community.norton.com/en/comment/7096411#comment-7096411

Kudos0

Re: Norton Download Insight removing files installed several years ago

Hello xfullmetal17

Please try downloading the game again.  You can keep the version you have now, just put it all in a folder and mark the folder Oldhaloce.exe. Perhaps a clean install will allow it.

Did you get the patch which was released today? Perhaps that will help.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.

This thread is closed from further comment. Please visit the forum to start a new thread.