• 所有社区 - 中文
    • 所有社区 - 中文
    • 论坛
    • 创意
    • 博客
高级

不是您要找的? 咨询专家!

此论坛帖文需要解决方案。
好评0

Sudden rash of Download Insight deletions

During the last month I have had GOG and Steam game purchases crippled by Insight file deletions (exe files and dll's). I am aware that I can exclude these files but why would I do that if Norton detects them as malware? I certainly don't want to hire a doberman then bark myself :). The last game crippled was a very expensive one called Divinity: Original Sin 2 by the developer Larian Studios and downloaded from GOG.

Norton reports: Unauthorised access blocked (DOS2 the exe file).

osiris_x64.dll file removed. WS.Reputation.1 - mature file - many thousands of users - medium risk.

iggy_w64.dll file removed WS.Reputation.1 - mature file - many thousands users - medium risk.

These files are just the ones in Divinity: OS2, there are many other files that have been deleted, some of them from games I have been playing for a while. For example,

1) lostlands_thegoldencurse.exe on Steam - deleted - WS.Reputation.

2) colonialconquest32bit.exe on Steam - deleted - Heur.AdvML.B - high risk.

3) Firefox setup for Win 10 downloaded from mozilla.org - Trojan.Gen.2 detected - high risk.

4) stilllife.exe - GOG game - deleted - Heur.AdvML.B - high risk.

5) thedivinityengine.exe - Divinity game editor downloaded from GOG - deleted - WS.Reputation.1 - medium risk.

6) patrician4.exe downloaded from steam - deleted.

There are many other files deleted and I haven't seen all the effects yet. I am sure that the Download Insight system is useful but are any of these deletions because of false positive detections? If so which? I need to know because I feel I should post on the Larian forums and on Steam and GOG that games are being sold that contain medium to high risk malware or viruses. I also need to get my money back. (Divinity: Original Sin 2 cost $60 !! I am not going to wear that.)

回复

好评0

Re: Sudden rash of Download Insight deletions

FWIW ~ https://community.norton.com/en/forums/clarification-wsreputation1-detection

Files reported as WS.Reputation.1 may not necessarily be malicious, and may be a false positive detection. Should you be uncertain as to whether a file has been reported correctly, for second opinion submit the file to https://www.virustotal.com/en/ to be scanned with multiple antivirus engines.

If you believe a file has been mistakenly detected by WS.Reputation.1, you can submit a dispute at https://submit.symantec.com/false_positive/.

好评0

Re: Sudden rash of Download Insight deletions

Thank you so much for your quick response bjm. Sadly it doesn't help me too much. I read the posts you have linked but they have one thing in common - they expect me to guess if the files in question have been wrongly detected or not. The answer to that is: "I don't know, I assume Norton knows these things better than I do". This probably means I am thick but I fail to see the logic in buying virus protection and then ignoring the advise of those I pay to protect my computer. More than that, I fail to see why I should have to submit a request for a "false positive" check to Symantec. I would think the game developer should do that, specially as I would have to attach the file to be checked only to find that Norton deletes it as soon as I click on it. I'm afraid I'm too old to fiddle around like this

I'm sorry,  I'm obviously wasting your time. I should accept what my virus checker tells me. I will attempt to get my money back from GOG and Steam based on the fact that they are selling games infected with malware as detected by Norton Internet Security. I will also post a warning on the games forums so others don't get caught too.

好评0

Re: Sudden rash of Download Insight deletions

If you suspect a file may have been mistakenly detected, you can submit a dispute at https://submit.symantec.com/false_positive/.

I would think the game developer should do that,

https://submit.symantec.com/whitelist/

[..] specially as I would have to attach the file to be checked

Or, a direct download link.


For more information > from Norton pop-up > More Details > Copy to Clipboard and/or from Norton history > More Options > Copy to Clipboard > paste.

For second opinion choose File &/or Search hash at VirusTotal.


You may submit your concerns thru Norton Feedback &or Product Suggestions.

You may always Chat with Official Norton Support.

Lets hear from Community

好评0

Re: Sudden rash of Download Insight deletions

Thank you again bjm. The only url's I could supply would be for GOG and Steam. I download through them and I don't know what the download url is for each of the various games which are affected. I suppose I could provide www.gog.com and a list of the games I'm having problems with - and the same for Steam. Or I could post the details on each developers web page and hope they will apply to be whitelisted. I understand that may take a while so in the meantime, just in case, I should try to get my money back for the games that I haven't had too long. Thank you for trying to help anyway.

好评0

Re: Sudden rash of Download Insight deletions

I mean, if you still want to use your software. Excluding the folders of installation is a good bet. No matter the case, the guesswork comes down to knowledge. If detection happened just after you install your games, then it is most likely legitimate or a false positive. Norton does give you a list of all files detected, which means it is quite easy to determine which files you should report as false positives.

好评0

Re: Sudden rash of Download Insight deletions

Hi Josh Ross. I know what you mean and that is exactly what I did on my first post (see above). I listed the source (GOG, Steam, Mozilla) and the files Norton detected as malware. I was hoping that this being a Norton forum maybe Norton monitors it and could use the information I've given to download and check those files. Perhaps they could do it in cooperation with GOG, Steam or the developers. I know that Norton are trying to protect our computers but if files are deleted because not enough people have objected to them being deleted (is that how Download Insight works?) then that just seems to be a very coarse form of virus prevention. I just think it will be more efficient to get my money back and refuse to pay a developer for software that is suspect. They can then sort it out with Norton and when it's approved I'll buy it. Anyway, I'm going to mark this thread as solved because it really is just wasting our time now. Thank you all for your advise, you've been very kind.

好评0

Re: Sudden rash of Download Insight deletions

Best of luck to you! Hopefully, your problems will be solved permanently!

This thread is closed from further comment. Please visit the forum to start a new thread.