Just installed newest update to Facebook Messenger from the Google Play Store. Using NMS 3.6.0.1053, and it reports a “malicious file”! The file is “com.facebook.orca”. What’s up with that???
Andmike wrote:Hi Saganized.
I have no idea what if anything is wrong with that file. I think you may choose to use it if you wish but that is up to you. I have ensured that your question is relayed to the NMS team but it is the weekend and so I have no idea if/when you may expect a response.
I assume you can continue using Facebook without having to install this update just yet.
I will let you know if I hear anything.
Andmike, thank you. I have submitted a False Positive report to Norton Security Response on this issue. I am fairly confident that's exactly what it is; because I kind of doubt Facebook would knowingly distribute "malicious files."
Also, I noticed several other comments--on today's (August 31) Google Play Store reviews page for the current version (update) of Facebook Messenger--saying that their NMS products too found a "malicious file." However, they didn't mention the filename.
Another reason I suspect it might be a "false positive" is because the update to Facebook Messenger is "newer" than the release time of the last NMS update. (Just a guess, of course. Hope they sort it out soon; because I'm also guessing there's absolutely nothing wrong with Facebook's Messenger product from the Google Play Store.)
Thanks again.
Facebook have removed/locked the messenger applications for Android and Windows from their application list.
The apps are listed but when you click on them to select a message pop: "The provided app ID is invalid".
So be careful with this app auntil it 's status is clarified.
Attaching a screenshot, which should have been with my original post. Sorry about that. Anyway, when I installed the latest update to Facebook Messenger, NMS showed me this:
So, I had NMS uninstall Facebook Messenger. NMS is current version, Facebook Messenger is (was) latest update in the Google Play store. The cell phone is an HTC One. Thanks.
Gayathri_R, thank you for merging my screenshot. (I don't know how to do that--is there a way members can merge input? Or, what is the preferred method to add content like my screenshot, "after the fact?" Thanks again!)
Re: "com.facebook.orca," I received an email from Symantec Security Response at 1750 UTC, today, September 3.
They said, my submission was "verified," and that the detection "will be removed from their products." So, I would expect this to be a "non-issue" within 24-48 hours or so. Hope this helps people with the problem. 
Just installed newest update to Facebook Messenger from the Google Play Store. Using NMS 3.6.0.1053, and it reports a “malicious file”! The file is “com.facebook.orca”. What’s up with that???
Thanks for the feedback Saganized.
Looks like all is well and everything worked as it should. I assume you would rather the odd false positive than having something really nasty happen. ;-)
As far as your question about how to post something - then do it as you did in your message that raise the question - respond to an earlier message in the thread and post whatever you need to. In the case of your image you had posted it in a new message/thread, but as it related to this thread I asked the mods to merge it. Does that help?
Andmike wrote:Thanks for the feedback Saganized.
Looks like all is well and everything worked as it should. I assume you would rather the odd false positive than having something really nasty happen. ;-)
As far as your question about how to post something - then do it as you did in your message that raise the question - respond to an earlier message in the thread and post whatever you need to. In the case of your image you had posted it in a new message/thread, but as it related to this thread I asked the mods to merge it. Does that help?
Andmike, yes...kind of. The thing is, as often as apps are updated on the Android Market or Google Play, I hope it doesn't happen too often--it could make it somewhat of an irritant.
Appreciate the input on "merging." As I recall, I tried doing what you suggested; but "jpg" wasn't an attachment option. I think I may have been using Norton Identity Safe at the time...could that have made a difference? Again as I recall, it seems the only options I was given for attachments were txt, pdf, and one other document type--no image files. Anyhow...all's well that ends well. Next time, I'll just use my home computer to reply (if I have to attach an image file).
Lastly, I ran LiveUpdate for NMS a couple hours ago, and the September 3 definitions are online. After doing that, I reinstalled Facebook Messenger, and there was no trouble at all--the issue is "fixed." Thanks.
Good news Saganized!
Re the insertion of the image then I am puzzled as I am not aware that the insertion of the image in a new post is any different from what is done in a reply. You may like to look at Yaso_Kuuhl's advice on inserting images which, though somewhat dated, is still valid I believe.
Hi, Andmike. I'm not sure what went wrong; because I've included images in my posts several times before with no trouble.
However, for some reason, that one time, I wasn't able to. The "Post Message" box would only let me include a "document" type file. Perhaps it was user error, perhaps a glitch. That said, when I look at the "Insert/edit image" tool now, it works fine.
All's well that ends well. Thanks for your help.
I am having the same trouble as the original poster. I tried running liveupdate and then reinstalling facebook messenger but it still is hitting as malware. Any ideas?
- bracy1976
Hi bracy1976.
Welcome to the Norton Community Forums.
What version of NMS are you running?
I also have the same issue on my Samsung Galaxy 2, Norton still says i got 1 Malware(fb messenger).
Hi Brandon94.
Welcome to the Norton Community Forums.
Can you confirm that you have run live update and let us know what version of NMS you are running?
The version I have (found under menu: about) is V3.6.0.1056.
Hi Brandon94,
Welcome to the Norton Community Forums :)
I would suggest downloading the latest Norton Mobile Security available on Google Play (3.6.0.1056) and then running LiveUpdate and then making sure the "Definitions updated as of:" date shows "09/12/2013" (or later if a newer version is available when you are able to run LiveUpdate).
After that I would suggest you download the latest Facebook Messenger available from Google Play which was just recently updated on 9/12/2013 (version 2.7.1-release).
Lastly, if you are still seeing the issue after the 2 steps above, can you please uninstall and reinstall either NMS or FB Messenger to see if this could be a cache issue that is carrying over the detection? If after re-installing FB Messenger no longer appears as a malware, can you please let us know so we can forward this information to the development team for further investigation?
If you are still having issues after trying all the steps above please let us know.
Please let me know if you have any questions.
I re-run the live update then did a scan and it doesn't have the message after. Thank you for the help you 2
Delighted that you are now sorted out Brandon94.
And thanks for letting us know.
Good luck for the future. :-)
Andmike wrote:Hi Saganized.
I have no idea what if anything is wrong with that file. I think you may choose to use it if you wish but that is up to you. I have ensured that your question is relayed to the NMS team but it is the weekend and so I have no idea if/when you may expect a response.
I assume you can continue using Facebook without having to install this update just yet.
I will let you know if I hear anything.
Andmike, thank you. I have submitted a False Positive report to Norton Security Response on this issue. I am fairly confident that's exactly what it is; because I kind of doubt Facebook would knowingly distribute "malicious files."
Also, I noticed several other comments--on today's (August 31) Google Play Store reviews page for the current version (update) of Facebook Messenger--saying that their NMS products too found a "malicious file." However, they didn't mention the filename.
Another reason I suspect it might be a "false positive" is because the update to Facebook Messenger is "newer" than the release time of the last NMS update. (Just a guess, of course. Hope they sort it out soon; because I'm also guessing there's absolutely nothing wrong with Facebook's Messenger product from the Google Play Store.)
Thanks again.
Facebook have removed/locked the messenger applications for Android and Windows from their application list.
The apps are listed but when you click on them to select a message pop: "The provided app ID is invalid".
So be careful with this app auntil it 's status is clarified.
Attaching a screenshot, which should have been with my original post. Sorry about that. Anyway, when I installed the latest update to Facebook Messenger, NMS showed me this:
So, I had NMS uninstall Facebook Messenger. NMS is current version, Facebook Messenger is (was) latest update in the Google Play store. The cell phone is an HTC One. Thanks.