Whats up with the Cloud 7 EP false positive thing? I thought it was suppose to be fixed?

I started getting a bunch of these “Suspicious.Cloud.7.ep” messages shortly after watching a YouTube video.  I am running Norton 360, version 20.3.1.22.  I read a bunch of information on the internet and tried everything to try and stop getting these notices.  I also spent a fair amount of time trying to understand what this  "Suspicious.Cloud.7.ep" is and if there is any real harm (other than making my computer run slower than molasses in January), and came to the conclusion that this is a heuristic type of problem.   I was able to stop getting this annoying message by doing the following:

 

1)      Open  Norton 360

2)      Open Settings

3)      Under Detailed Settings, open Antivirus

4)      Click on the "Scans and Risk" tab

5)      Turn OFF Heuristic Protection

 

So far this has stopped the Suspicious.Cloud.7.ep from popping up all the time and my computer appears to be working fine.

 

I would like to get Norton’s though on if this is a safe and acceptable approach (or work around) for this problem and that I am not opening up my computer for any other risks?

It is not a false positive. It seems to be a threat. Norton blocks it. But it needs Manuel removal.

 

Steps to remove it

 

Step 1. Locate the file path from Norton Security History

 

Step 2. Run NPE

 

Step 3. If NPE is not fixing the issue, restart PC to safe mode and manually remove the file.

 

It usually comes under folder c:\users\currentuser\appdata\local\ *.dll

 

 

Also clear the temporary files on your computer

I had the same problem.  I downloaded and used the Norton Power Erasere (NPE) for free and it got rid of the problem.  Follow directions exactly.. 

 

http://security.symantec.com/nbrt/npe.aspx

Since 6/4/13 I too had the problem. Norton Power Eraser did not identify the bad file on the first attempt. Since it had worked for others, a few hours later I ran it again and it identified and removed the bad file. On my computer it was file C:\users\dave\appdata\local\corel\cwhwydxs.dll. This indeed solved the problem but I was concerned as Corel is the software that came with my Sony Windows 7 laptop to play Blu-Rays. Sure enough, now a blu-ray movie will not play. I rarely play blu-rays on my laptop so not a big problem. I tried downloading Corel updates from the Sony support site, but Blu-Rays still will not play. I obviously do not want to reinstall the bad file. Any options other than downloading and paying for new Blu-Ray player software?

"............Sony Windows 7 laptop to play Blu-Rays..................."

 

If the software and drivers came with the Sony Laptop / Notebook,  Look up the system make and model number on sony's website and they should have a the software / drivers downloads.

 

HP, Compaq, ASUS, etc do.

 

Quads

I get the Cloud.7.EP warning constantly. I've done a full scan which detected nothing and I downloaded and used NPE which did not fix the problem. The path is C:\program files (x86)\DnsBasic\dnsbasic.dll


SRY wrote:

I get the Cloud.7.EP warning constantly. I've done a full scan which detected nothing and I downloaded and used NPE which did not fix the problem. The path is C:\program files (x86)\DnsBasic\dnsbasic.dll


It's classed as a PUP.

 

There is a Malware biard.

 

Quads

I noticed the Suspicious.Cloud.7.EP popup since June 1st. In the bottom-right corner Norton Internet Security says that the problem has been resolved - though it makes me worry that this problem keeps reappearing. Even though as of now nothing in my computer's running speed has been impacted, I worry that in the future the file might become more of a problem.

 

Norton says that the file is located in C:\Users\Owner\AppData\Local\Skype\gucfomzy.dll

I found the file but how should I go about deleting it? I saw Norton Power Eraser mentioned earlier in the thread, but would it accidentally delete other important files? Would uninstalling Skype (in my case) solve the problem, or is it possible to delete the file manually?

 

When I was searching up Suspicious.Cloud.7.EP it seems other people had infected Flash Player files instead of Skype ones? Is that true?

 

Thanks for any suggestions/comments you guys may have. I kind of just want to see what other people say before deciding on a course of action for the file because at least for right now, my computer is running fine.

 

EDIT to below: I have Version 19 Norton Internet Security (purchased last year)

So is this happening just with the 2013(or version 20) products?

I have version 20.3.1.22 and have been getting the message since 30 May.

Users are on this thread where is is NOT a False Positive.

 

Quads

I was afraid to download and try the Norton Power Eraser as I feared that I would really mess something up even worse than I was. My wonderful husband did it for me and I have not had that "Pesky" Norton Cloud 7 popping up every 15 seconds. At least it has not done so in the last half hour. Thank you hubby! 

 

I do believe there is a direct link with something that was included with an update from Norton 360.  So many people got it this last week and all seem to be running Norton 360. We also just renewed ours about 2-3 weeks ago and we got that nasty notification shortly there after. Kudos to my husband!

Cloud 7 EP is a Symantec detection name and not the likes of AVG and other AV's,  that is why it is Norton detecting a object with that name.

 

Quads

So I’m running norton power eraser and it asks me to delete the following files:

Gucfomzy.dll
Ngmsetup.exe
Xauxixsr.exe.part

I know from my post on the previous page that I need to delete gucfomzy.dll
But what do the other files do? I assume I should leave the other two files alone.

Any help would be most appreciated. Thanks in advance.

EDIT: ngmsetup.exe turns out to be a game file that I don’t really care if I delete or not (since all I want is to ensure the threat is gone.). I’m still not sure what xauxixsr.exe.part is, and a google search doesn’t get me anything. Anyone know if it is important?

In the instructions it says when these files come up if you are unsure you should click on the "cloud" and it will go out and run some new information and let you know if it should be deleted or not. Hope you get yours fixed. My husband did it to mine last night and my system is now runniong good again. :)

 

FWIW:

 

I used Norton Power Eraser and it appears to have done the job.

 

Normal Norton 360 (full) Scan showed nothing.

 

MW Bits found one offending file (and removed it) but did not cure the problem (The constant processing was, apparently, soaking up all the computer's resources.

 

Applied Norton Eraser and it found 3 funly files. It successfully removed one but reported "failed" on the other two (Sorry, can't recall the names). 

In any event, all appears well now.      YMMV

Thanks maryft for the reply.

 

I used Norton Power Eraser to just delete gucfomzy.dll and everything works fine now - smooth speed and no annoying popups. Thanks for everyone else's comments on this thread.