AV blocks client - suspicous files (FALSE ALARM)

Discuss technical problems here & find help.
V3r0x90
Posts: 1
Joined: 11 Jul 2016, 19:18

AV blocks client - suspicous files (FALSE ALARM)

Postby V3r0x90 » 11 Jul 2016, 19:25

Hi,

my Norton AV showed the follwing files as suspicious:

win\launcher\client\tal_data\managed\yamlserializer.dll
launcher-win\launcher\client\tal_data\managed\protobuf-net.dll
launcher-win\launcher\client\tal_data\managed\inifileparser.dll
launcher-win\launcher\client\tal_data\managed\farseerphysics.dll

all as WS.Reputation.1

-- just for information --

User avatar
dbltnk
Game Developer
Posts: 2544
Joined: 27 Feb 2014, 12:52

Re: AV blocks client - suspicous files

Postby dbltnk » 11 Jul 2016, 22:09

Thanks for the report!

I've just checked all six downloads (three patchers, three clients) with five different virus scanners (Windows Defender, Kaspersky, Avira, AVG, Avast) and they all told me they were clean. I'm now running Norton to see what exactly it reports. I think it's likely a false positive - all of the files above are open source code and unlikely to contain any virus code.

I will wait for Norton to finish and then get in touch with them to find out why these false positives occur. Will keep you posted.

Alex

User avatar
dbltnk
Game Developer
Posts: 2544
Joined: 27 Feb 2014, 12:52

Re: AV blocks client - suspicous files

Postby dbltnk » 12 Jul 2016, 10:25

Good morning. I have now also checked the files using Norton AV and got zero warnings. Can you please provide me with a full report so that I can forward this to Norton and find out why you got the false positive?

Thanks!

Alex

User avatar
dbltnk
Game Developer
Posts: 2544
Joined: 27 Feb 2014, 12:52

Re: AV blocks client - suspicous files

Postby dbltnk » 12 Jul 2016, 11:36

I have just reported this with all available information to Norton. In case you want to do the same, this is their support link for false positives: https://submit.symantec.com/false_positive/

User avatar
dbltnk
Game Developer
Posts: 2544
Joined: 27 Feb 2014, 12:52

Re: AV blocks client - suspicous files

Postby dbltnk » 13 Jul 2016, 10:53

Update: Symantec / Norton has confirmed that these were false positives and have just whitelisted the files. So you can be sure that there is no virus in the game and you can release those files from their exile and play the game. =D

Alex

Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:

Filename: FarseerPhysics.dll
MD5: 14BEE867F328407E75DD1259D14EE10D
SHA256: 17AA8BB9A00D4E9B118CEC984E0CDF0FD5E4B0BC5C6806E13D8851F31914EB48
Result: Whitelisting for above file is taking effect from now on.


Filename: Assembly-CSharp-firstpass.dll
MD5: 2A65380E79DC280E7A8950FED83A65B3
SHA256: 170E3EE84EA98FAE530F7AB209DA9C4987803BB414DBEA872F62719185E7B2A5
Result: Whitelisting for above file is taking effect from now on.


Filename: BestHTTP.dll
MD5: 372CDAB3AA84A5BAEC01BE7B3EDE0ABE
SHA256: 5DDEAF467403FE2B36E2B2E6BB2CBE5036ECE89BBA9643286B2AA3F69C597FC4
Result: Whitelisting for above file is taking effect from now on.


Filename: protobuf-net.dll
MD5: 4DE1FA78FD83D396EBBABCC6566A19DF
SHA256: ABA03B3486599BCA01719C81217E2870F575B579131E2C3F34D83A347BF4FB41
Result: Whitelisting for above file is taking effect from now on.


Filename: INIFileParser.dll
MD5: 5DE49A919225F9F2D4D8597F9FE98C1D
SHA256: 7B77B110233EDBE70605A96B1D6BA19B07757A496E966BC635650EC30DAE7512
Result: Whitelisting for above file is taking effect from now on.


Filename: RestSharp.dll
MD5: 75BE98AA789F11415D67A53133F1765B
SHA256: 33793824E3D92E725C12DA8D39523A7324D30BA9E04BECB567B7B0E59A0A3C4B
Result: Whitelisting for above file is taking effect from now on.


Filename: Assembly-CSharp.dll
MD5: 7897E9F8A6945181CF1278C8F73CD1C4
SHA256: 856ADF98A3F304B7CDE6F672E662FF034A6015389920B146FE4F36A8B6E3ED75
Result: Whitelisting for above file is taking effect from now on.


Filename: Alastri.FastBinMinHeap.dll
MD5: 84119D9F91E06C0644F6933E659647BF
SHA256: 9E646145EDA68A6070C8A79ADEF7CE8576FC9EEA376BCA7376CEA84D100DBCDD
Result: Whitelisting for above file is taking effect from now on.


Filename: YamlSerializer.dll
MD5: B65E254387AB6FB64706C2E64D844F6E
SHA256: 20AAA82CAF653D8FE509F67DDA423809237246C57F95249796B5C6C87A4EB15E
Result: Whitelisting for above file is taking effect from now on.


Filename: Assembly-UnityScript-firstpass.dll
MD5: F426DD6B08109AD1E510B1C2A7ECA9AD
SHA256: A28495D0DF91FE365FDD327687B9A0C5353D42F4C59EFA49660852B9DEBEFA41
Result: Whitelisting for above file is taking effect from now on.


Filename: Triangle.dll
MD5: FF07943CA60D03CF1DCEAB19309BF87C
SHA256: 93EB363E88F3906078BD5A2D77E0AF37FFF846B168A3B101BB5918131924CF16
Result: Whitelisting for above file is taking effect from now on.


Return to “Help & Support”

Who is online

Users browsing this forum: No registered users and 1 guest