• 所有社区 - 中文
    • 所有社区 - 中文
    • 论坛
    • 创意
    • 博客
高级

不是您要找的? 咨询专家!

此论坛帖文需要解决方案。
好评0

Wowmapper Installer

I wish to use an Xbox controller on my PC to play World of Warcraft (WOW). In order to do this, I must download and install an "addon" program. Consoleport is just such a program: ConsolePort

The download instructions require the user to install Wowmapper. This  executable program Wowmapper_Installer.exe configures the controller for use in WOW. However, Norton quarantines and deletes the executable program. I checked on the WOW forum and most believe that the program is safe, so many have used it. However, no one is certain, and Norton's actions concern me about using this program. What should I do? Download it and hope for the best? I have contacted the developer, but this far he has not responded to my email. How do I determine if it's safe to use? 

回复

好评0

Re: Wowmapper Installer

Scott you should send the file to have it examined by Norton. Please use this link if you think that a file is a false positive:
You can report false positive indications here https://submit.symantec.com/false_positive/ Although many users have use the file Norton seems to see something that should be addressed. Stay on the safe side and report it.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.437 / NCSP 22.17.0.183 / Norton Core v.282 on Android 1.93
好评1 Stats

Re: Wowmapper Installer

Thanks for the information. I have submitted the file to Symantec for examination.

Your Submission Has Been Sent

Mon Aug 14 10:02:43 PDT 2017

Your submission has been sent. You will receive an email message from Symantec with a tracking number that will enable you to check the status of this submission.

First Name:scott

Last Name:

Company Name:n/a

Email Address:

Symptoms:wowmapper.exe quarantined by Norton but the program is widely used by world of Warcraft community

Submission Type:File Submission

Uploaded File Size:844747

Uploaded File Name:WoWmapper.zip

好评0

Re: Wowmapper Installer

Great!! Please let us know the results so others in the community can see it.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.437 / NCSP 22.17.0.183 / Norton Core v.282 on Android 1.93
好评0

Re: Wowmapper Installer

Um, opening post screenshot refers to WoWmapper_Installer.exe
https://github.com/topher-au/WoWmapper/releases/tag/7.2.3

Perhaps Scott Marcy1 downloaded zip and unpacked.  ?

FWIW
File name: WoWmapper.zip
Detection ratio: 0 / 60
Analysis date: 2017-08-14

File name: WoWmapper_Installer.exe
Detection ratio: 3 / 64
Analysis date: 2017-08-14

好评0

Re: Wowmapper Installer

I could not download and then upload the Wowmapper_Installer.exe: Norton blocks it. I could download the Wowmapper.zip file and send that to Symantec. Correct me if I'm wrong, but I believe that the zip file contains the same executable file. The website .exe skips the download and unzip step. They should be the same.

好评0

Re: Wowmapper Installer

Yes Scott. The zip contains all the files Norton needs to look at.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.437 / NCSP 22.17.0.183 / Norton Core v.282 on Android 1.93
好评0

Re: Wowmapper Installer

Okay, we'll see.  I think Symantec will analyze static zip since you submitted zip. 
Symantec may not extract nor execute.  

compare Installer.exe with extracted/unpacked wrapper exe. 

File: WoWmapper_Installer.exe
File size: 942 KB (964,166 bytes)
MD5 checksum: E26F8236F7E31451F479030B4199B09A
SHA256 checksum: 72EF71B15CD49A08194F7BA87BC92CEA4175E916F359B0BA1A3B20F92ED2DBC9

File: WoWmapper.exe
File size: 1.13 MB (1,184,256 bytes)
MD5 checksum: 6E1B320EA688681E3A1A8DEB73E7F5CD
SHA256 checksum: 9C2BB50C7FB3E5728FB83E489E845EDB78AAAD8C0782A3D4738F927D5B022068

I'd look at Copy to Clipboard info and submit the file I wanted Symantec to re-analyze.  Just me.

FWIW ~ https://community.norton.com/en/forums/clarification-wsreputation1-detection

Files reported as WS.Reputation.1 may not necessarily be malicious, and may be a false positive detection. Should you be uncertain as to whether a file has been reported correctly, submit the file to https://www.virustotal.com/en/ (link is external) to be scanned with multiple antivirus engines.

If you believe a file has been mistakenly detected by WS.Reputation.1, you can submit a dispute at https://submit.symantec.com/false_positive/.

Cheers

好评0

Re: Wowmapper Installer

FWIW ~

In relation to submission 45459.
Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:
File name: WoWmapper.exe
MD5: 6e1b320ea688681e3a1a8deb73e7f5cd
SHA256: 9c2bb50c7fb3e5728fb83e489e845edb78aaad8c0782a3d4738f927d5b022068
Note: Whitelisting may take up to 24 hours to take effect via Live Update

Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.
If you are a software vendor and would like to upload your software for proactive whitelisting: https://submit.symantec.com/whitelist
For more information on best practices to reduce false positives:
http://www.symantec.com/content/en/us/enterprise/white_papers/b-to_increase_downloads-instill_trust_first_WP.en-us.pdf
Sincerely,
Symantec Security Response

好评0

Re: Wowmapper Installer

All: Glad seeing the suggested submission resolved the issue. Thanks to bjm_ for their kind assistance.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.437 / NCSP 22.17.0.183 / Norton Core v.282 on Android 1.93
好评0

Re: Wowmapper Installer

Will this also include the WoWmapper_Installer.exe or is this just for the Wowmapper.zip which includes the Wowmapper.exe? Should I request a reclassification for the WoWmapper_Installer.exe based on the results for submission 45459?

Link to Wowmapper Page

好评0

Re: Wowmapper Installer

FWIW ~ I did not submit zip because you submitted zip. Permalink

I submitted WoWmapper.exe because you wrote << Symptoms:wowmapper.exe quarantined by Norton.>>

Since, I cannot see your Copy to Clipboard info.  Permalink
I chose WoWmapper.exe (Application 1.13 MB) that tripped WS.Reputation.1


For more information > from Norton pop-up > More Details > Copy to Clipboard and/or from Norton history > More Options > Copy to Clipboard > paste.


Are you able to "download and install" WoWmapper? 


Let us know re Your Submission Has Been Sent Mon Aug 14 10:02:43 PDT 2017 Permalink

好评0

Re: Wowmapper Installer

Norton doesn't detect this until the zipped archive has been decompressed into a folder of its own. I did so with 7-zip. Then had Norton scan that entire folder. The exe was removed, not even quarantined. Just flat removed. I believe the Norton team are fairly competent and should decompress the zipped package to determine why this installer is considered a threat. Download insight detected nothing what so ever. As stated detection occurred ONLY when the entire archive was decompressed into a folder of its own then scanned. I NEVER attempted running the install FWIW!!

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.437 / NCSP 22.17.0.183 / Norton Core v.282 on Android 1.93
好评0

Re: Wowmapper Installer

If you believe a file has been mistakenly detected, you can submit a dispute at https://submit.symantec.com/false_positive/.

好评0

Re: Wowmapper Installer

You do not have to risk your system to submit the false positive. As you progress through the submission pages, when you get to the upload the file section, there is a drop down box where you can provide a direct download to the installer.

Things happen. Export/Backup your Norton Password Manager data.

This thread is closed from further comment. Please visit the forum to start a new thread.