File autodeleted as (Trojan.Gen) by Auto-Protect, and won't exclude forever.

djteka · July 30, 2010, 3:05pm

There has been a file that Norton keeps deleting automatically,

even if the folder it is placed in is excluded from autoprotection.

It's a camera controlling program designed for the game 'Torchlight',

and while it works to exclude for a while, it is detected and deleted, as if dangerous, as such:

c:\program files (x86)\steam\steamapps\common\torchlight\torchlightcam.exe

On computer as of 5/16/2010 at 12:20:35 AM

Last Used:7/30/2010 at 4:14:45 AM

Startup Item: No

Launched: No

Few Users - Fewer than 100 users in the Norton Community have used this file.

High - This file risk is high.

Threat Details - Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.

Origin - Downloaded from Not Available

URL Not Available

UNTESTED

Sourceexplorer.exe
File Created: torchlightcam.exe

File Actions

Infected file: c:\program files (x86)\steam\steamapps\common\torchlight\torchlightcam.exe - Removed

File Thumbprint: Not Available

Here is the creator's thread in the official game forums,

where there are also complaints of malware being misdetected by many AV programs.

Here is the VirusTotal scan of the file in question:

I swear it's not as bad as this makes it out to be,

it's just simply for rotating and zooming a camera in a game.

Now what I'd like to know is how to tell Norton to leave the file alone,

to *actually* exclude it instead of just saying it will, but going back on it's word later?

Can this file be registered as a False Positive?

I tried to do that myself, but it seems only the creator of the program can do that,

and I'm not sure if I could get a hold of them to try and tell Symantec that it's not a problem file.

What can I do?

I've linked the file in question, if this is not proper to do,

then I will remove it from the post, or possibly whoever tells me it's not right to do will do it for me.

(Download link appears near bottom of first post.)

Announcements