Civ 5 trainer quarantined by Nortons 360: Help Needed

Hi all, hopefully I've put this is the correct forum, if not then apologies, I have a rather irritating problem that is being caused by Nortons 360.

It revolves around a "cheat" for a game and Nortons calls it a Trojan.

Namely this one:  Trojan.ADH

 I've done a search for this and I can't seem to find this so called trojan.

 This is what the "cheat"/trainer is for

I am trying to use an add-on for a pc game called Civilisation Vand this is what is known as a "trainer" whereby it allows you to alter some aspects of the game yourself, that is to say it lets you add items in the game, ie money, buildings, troops etc

When I download it there is not a problem, Nortons scans it and leaves it alone but as soon as I unzip it then Nortons removes it, that is to say it quarantines it so I can't use the programme. This is not a virus or a hack attempt at all on my pc. The software programme runs at the same time thereby allowing me to alter the game when it is running.

I even tried to reinstall this programme from quarantine, but as soon as it has done that Nortons quarantines it again! I can't see how I can stop Nortons from repeating this action as Nortons say this is a High Threat Level Trojan and removes it.

 In one way they are correct as it does alter a programme. but it is NOT a virus and it is NOT malicious, its sole intent, the programme that is, is to allow you to alter the game when it is running and nothing more. Even the programmer and people on the forum make comments on this, but there doesn't seem to be an answer to this, apart from not using Nortons, ie removing Nortons from my pc, as even turning it off doesn't seem to stop it from quaranting this item. There are a variety of different types of "cheat" programmes that enable you to alter pc games out there and there are a lot of "trainers" too. All you need to do is an online search and you can find them.

 

This is part of the onscreen message in the quarantine section:

civ5dx9 custom trainer improved.exe (Trojan.ADH) detected by Auto-Protect,Quarantined,Resolved - No Action Required 

 

There seems to be no way of getting this past Nortons anti-virus, I've tried a few times but each time it is put back in to quarantine as I can't even get to the point to get Nortons to ignore it. Any help would be appreciated on this as it would appear that Nortons is intent on keeping this listed as a trojan. In one sense, as I've said they are right, but for people to use this they, Nortonsneed to appreciate what it does. Other anti-virus software, or so it would seem, allows this to be loaded. So either someone at Nortons doesn't like this type of "cheat" or Nortons is really agressive in what it looks for.

 

I thought I'd ask on here as Nortons seems to be the culprit here and as some of you may well be pc smart, I'm not that clever with pc's and you may well know what to do to resolve this kind of issue and thereby help me out with this problem.

I've always had Nortons on my pc's and laptops apart from when some are shipped with other types of protection, I always come back to Nortons as I've never had any problems with them whatsoever, apart from this one, that is and I hope someone can explain what I can do, and I use this word half heartedly.. to TRY to resolve this.

I tried loading that link and it wouldn't open, I just kept getting a connection problem (Interner Explorer couldn't open.. connection problem etc etc) This was happening whilst this page and a few others were open at the same time, so I know there isn't a problem at my end. I'll have to take a look later on today. So tell me, what exactly can they do that Nortons can't?

From what I've heard some antivirus companies are not overly bothered by something by this as there are not that many "users" of this type of programme so it gets, as it were, pushed down the list of priorities with regards to its importance.

If you can enlighten me as to what these people can do that Nortons can't then as I said in my first post it's Nortons that's on my system and it's their antivrus that is "killing"/blocking this programme.

 

Hi wabbithunta,

 

When you upload a file, such as civ5dx9 custom trainer improved.exe, to VirusTotal it will be scanned by the antivirus engines of about 40 different AV products.  If Symantec is the only one that detects a virus, then it may be a false positive.  But if several other vendors also alert to the file, then it is more likely actually malicious.  Before excluding a file from future scans, it is always best to check it out.  Trojan.ADH is a heuristic detection and may be an FP, but it is based on the file's characteristics - not the file's reputation score - and so there is definitely something about the file itself that is suspicious.  You can also submit the file to Symantec if you suspect a false positive:

 

https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?docid=kb20100222230832EN_EndUserProfile_en_us&lg=english&ct=united+states&product=home&version=1&pvid=f-home

 


Hello wabbithunta

 

There are online gamers among the users of Norton products and Norton does try and keep up with the new games and even the old ones. I for one am an online gamer as you can tell from my avatar.

 

http://anubis.iseclab.org/ is another file analyser; it actually executes the binary and observes its behaviour.

 

These online file analysers use multiple scanning engines with complete signature databases, which would be wholly impractical (if not impossible) to have in a real-time scanner.

 

Since trainers/cracks intrinsically exhibit virus-like behaviour and are likely to trigger a false positive, they are a great means to deliver an actual virus.  I use these also and I know it is thin ice; be extra cautious.

Hi all, hopefully I've put this is the correct forum, if not then apologies, I have a rather irritating problem that is being caused by Nortons 360.

It revolves around a "cheat" for a game and Nortons calls it a Trojan.

Namely this one:  Trojan.ADH

 I've done a search for this and I can't seem to find this so called trojan.

 This is what the "cheat"/trainer is for

I am trying to use an add-on for a pc game called Civilisation Vand this is what is known as a "trainer" whereby it allows you to alter some aspects of the game yourself, that is to say it lets you add items in the game, ie money, buildings, troops etc

When I download it there is not a problem, Nortons scans it and leaves it alone but as soon as I unzip it then Nortons removes it, that is to say it quarantines it so I can't use the programme. This is not a virus or a hack attempt at all on my pc. The software programme runs at the same time thereby allowing me to alter the game when it is running.

I even tried to reinstall this programme from quarantine, but as soon as it has done that Nortons quarantines it again! I can't see how I can stop Nortons from repeating this action as Nortons say this is a High Threat Level Trojan and removes it.

 In one way they are correct as it does alter a programme. but it is NOT a virus and it is NOT malicious, its sole intent, the programme that is, is to allow you to alter the game when it is running and nothing more. Even the programmer and people on the forum make comments on this, but there doesn't seem to be an answer to this, apart from not using Nortons, ie removing Nortons from my pc, as even turning it off doesn't seem to stop it from quaranting this item. There are a variety of different types of "cheat" programmes that enable you to alter pc games out there and there are a lot of "trainers" too. All you need to do is an online search and you can find them.

 

This is part of the onscreen message in the quarantine section:

civ5dx9 custom trainer improved.exe (Trojan.ADH) detected by Auto-Protect,Quarantined,Resolved - No Action Required 

 

There seems to be no way of getting this past Nortons anti-virus, I've tried a few times but each time it is put back in to quarantine as I can't even get to the point to get Nortons to ignore it. Any help would be appreciated on this as it would appear that Nortons is intent on keeping this listed as a trojan. In one sense, as I've said they are right, but for people to use this they, Nortonsneed to appreciate what it does. Other anti-virus software, or so it would seem, allows this to be loaded. So either someone at Nortons doesn't like this type of "cheat" or Nortons is really agressive in what it looks for.

 

I thought I'd ask on here as Nortons seems to be the culprit here and as some of you may well be pc smart, I'm not that clever with pc's and you may well know what to do to resolve this kind of issue and thereby help me out with this problem.

I've always had Nortons on my pc's and laptops apart from when some are shipped with other types of protection, I always come back to Nortons as I've never had any problems with them whatsoever, apart from this one, that is and I hope someone can explain what I can do, and I use this word half heartedly.. to TRY to resolve this.