Jump to content
The simFlight Network Forums

Norton Anti-Virus and 3.999z2


Recommended Posts

Pete, My NAV fully blocked the installation though I'm not surprised. I added this version to my "exceptions" even though it showed a very high alert. Just to be sure, are we okay here? And will there be a further version that won't produce the alarm (I don't like having exceptions lurking about. :???: ) ? Thanks.

Link to comment
Share on other sites

Pete, My NAV fully blocked the installation though I'm not surprised. I added this version to my "exceptions" even though it showed a very high alert. Just to be sure, are we okay here? And will there be a further version that won't produce the alarm (I don't like having exceptions lurking about. :???: ) ? Thanks.

You don't say which package, but both the FSUIPC3 and FSUIPC4 packages check out here, and my whole PC checks out with no viruses. it is going to be a false alarm. The binaries are encrypted to ensure they can have code viruses attached and are only de-scrypted when run, so the base encrypted versions look nothing like the real code.

Regards

Pete

Link to comment
Share on other sites

I'm sorry, I thought the version was in the topic's title. It is 3.999z2 for FS9. Again, it has installed correctly after I approved the exception. I just wanted to give you a heads up so that, hopefully, someone else will see your reply in case they also have this happen. I can send you the av log if you need it for some reason. Thanks.

Link to comment
Share on other sites

Pete, Having the same problem as CDreier. NAV 2013 did not like FS9 3.999z2 version of FSUIPC. The FSX version installed properly. NAV deleted the installation file saying that it was identified as the Bloodhound.Sonar9 Trojan virus. I did a NAV On Demand scan of the installation file, which returned "No Threats Found". I tried both the website file and the Dropbox version that was with link included on the SimMarket email announcement. Any thoughts? Thanks, Rich Boll Wichita Kansas

Link to comment
Share on other sites

Pete, Having the same problem as CDreier. NAV 2013 did not like FS9 3.999z2 version of FSUIPC. The FSX version installed properly. NAV deleted the installation file saying that it was identified as the Bloodhound.Sonar9 Trojan virus.

The installation file is a packed and encrypted conglomerate of the FSUIPC program itself and all of the documentation and Lua files, as well as the installer program itself. There is no identifiable code in it until it is run other that the same unpacker as included in the installed FSUIPC. Therefore it is a false identification .You simply need to tell Norton so they can extend the number of bytes they actually check for that virus. The trouble is they cast such a wide net by using as few recognition bytes as they think they can get away with. When confronted with semi-random data they make false identifications.

Pete

Link to comment
Share on other sites

The installation file is a packed and encrypted conglomerate of the FSUIPC program itself and all of the documentation and Lua files, as well as the installer program itself. There is no identifiable code in it until it is run other that the same unpacker as included in the installed FSUIPC. Therefore it is a false identification .You simply need to tell Norton so they can extend the number of bytes they actually check for that virus. The trouble is they cast such a wide net by using as few recognition bytes as they think they can get away with. When confronted with semi-random data they make false identifications.

I've also now uploaded a ZIP containing only the DLL itself, no installer. If it is only a false pattern being found in the Installer then maybe the 3.999z2 DLL only will not trigger a response from NAV.

Regards

Pete

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
 Share

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use. Guidelines Privacy Policy We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.