Bojangles Aug 23 @ 3:47pm
[SOLVED] Check your computer for virus
I just downloaded build 268 via steam update and my Norton anti-virus detected "Suspicious.Cloud.5.A" trojan.

So for all you who don't run anti-virus, get one!

Regards

**UPDATE**: Sorry the file name specifically was called - crystaldxt_compress.dll

**Admin Edit** Caused by Norton who have acknowledged an error on their part. False detection.
Last edited by YO | Obraxis; Aug 28 @ 2:13am
Showing 1-15 of 17 comments
< >
kesuga7 Aug 23 @ 4:09pm 
CAN anyone else confirm this?
Bojangles Aug 23 @ 4:13pm 
My download region was set to the Edmonton server. Im trying the Calgary server but it does not seem to be working.

**UPDATE**: Cant seem to update to build 268. Whenever I download, Norton keeps on saying its a trojan and deletes it. So I cant update to build 268, I don't know what to do.
Last edited by Bojangles; Aug 23 @ 4:33pm
Keijo Aug 23 @ 5:00pm 
Well I have reliable antivir and ive never got anything from steam, I think it's a false alarm for example my antivir prevents launching the game insurgency at all even tho theres no virus.

Maybe you can add an expection to ns2 directory so it doesn't check it for the update, but since I dont have norton I dont wan't to take any responsabilty for other peoples computers.

Bojangles Aug 23 @ 5:08pm 
Its not that the game is being prevented to launch by the anti-virus. A specific file is being removed after the update has been downloaded.

It is a TROJAN. the name of the trojan is Suspicious.Cloud.5.A

The specific file on my computer that is being targeted is:

e:\steam\steamapps\common\natural selection 2\utils\crystaldxt_compress.dll

Richard Jones Aug 23 @ 5:21pm 
Scanned with HitmanPro & ESET NOD32 Antivirus.
Nothing found at my end.
Keijo Aug 23 @ 5:25pm 
Yeah I know but definition of a trojan is so loose that, it's like trojan horse that when they loaded guys inside a wooden horse to assault enemy base in ancient greece. You know anything that is going to do something similar to your computer might be falsely identified as a trojan virus.

But I have that file, it's 100% safe, but I have different antivir. But because I don't want to risk other people computers I cant advice you to take any actions.

Ghoul Aug 23 @ 5:28pm 
Ok CDT DEV Ghoul here:

First of that seems to be a false alarm:
https://www.virustotal.com/latest-scan/35db948999a9de96ba3b04e078d6cebb

Secondly the module is totally open source and taken from here: https://code.google.com/p/nvcompress-quick/

I just checked the code again and couldn't find anything looking like a maleware.

Suspicious.Cloud.5.A just means it's suspecious. All this means its footprint looks similair to malware which can mean that it is malware but doesn't have to.

A Trojan would be labled as Trojan.Win32.XY .

Here a detailed explanation why norton sees it as thread:
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: http://www.clamav.net/index.php?s=pua&lang=en .

Overall:

This dll is not used by the game itself but only by the builder.exe which is part of the modding tools and also only there for generating texture files.

The given software is part of the nvidea texture tools ( i don't think nvidea published malware )

So overall NS2.exe itself won't use the dll, the source of the dll is open source and based on a product released by Nvidea Co.

So no need to fear for your pcs security.

A liitle tip from my side: Get a better security software suite which is less known for false alerts like norton.

A report was also send to the Symantec Corporation that this is a false alert to avoid issues in the future
Last edited by Ghoul; Aug 25 @ 12:45am
Zyfer [NEOPS] Aug 24 @ 7:29am 
rule of thumb, dont use norton, ever, norton is more a virus than an actual virus...
Last edited by Zyfer [NEOPS]; Aug 24 @ 7:29am
E.T. the Extra Testicle Aug 24 @ 12:42pm 
Originally posted by 2.FJgZyfer-Jg:
rule of thumb, dont use norton, ever, norton is more a virus than an actual virus...

Agreed, norton/mcafee are for boys and senoirs just discovering the internet.
Be a man and use ESET & malwarebytes. Haven't had an issue in 6 years with those 2 (+ spybot search and destroy if you have ocd and need to wash your hands every 2 minutes.
AvidWriter Aug 25 @ 6:22am 
[PUBLIC SERVICE ANNOUNCEMENT] Norton sucks!
Noran Aug 25 @ 8:31am 
Originally posted by 2.FJgZyfer-Jg:
rule of thumb, dont use norton, ever, norton is more a virus than an actual virus...


Originally posted by E.T. the Extra Testicle:
Originally posted by 2.FJgZyfer-Jg:
rule of thumb, dont use norton, ever, norton is more a virus than an actual virus...

Agreed, norton/mcafee are for boys and senoirs just discovering the internet.
Be a man and use ESET & malwarebytes. Haven't had an issue in 6 years with those 2 (+ spybot search and destroy if you have ocd and need to wash your hands every 2 minutes.


Originally posted by AvidWriter:
[PUBLIC SERVICE ANNOUNCEMENT] Norton sucks!

Lol, I've used Norton Endpoint fro year now... never had an issue. Zero performace hits. No false alarm this entire time...

Maybe you kiddies should stop using consumer based products?
Last edited by Noran; Aug 25 @ 8:32am
E.T. the Extra Testicle Aug 25 @ 1:36pm 
Originally posted by Noran:
Originally posted by 2.FJgZyfer-Jg:
rule of thumb, dont use norton, ever, norton is more a virus than an actual virus...


Originally posted by E.T. the Extra Testicle:

Agreed, norton/mcafee are for boys and senoirs just discovering the internet.
Be a man and use ESET & malwarebytes. Haven't had an issue in 6 years with those 2 (+ spybot search and destroy if you have ocd and need to wash your hands every 2 minutes.


Originally posted by AvidWriter:
[PUBLIC SERVICE ANNOUNCEMENT] Norton sucks!

Lol, I've used Norton Endpoint fro year now... never had an issue. Zero performace hits. No false alarm this entire time...

Maybe you kiddies should stop using consumer based products?

All of norton products are notorious for false positives and being a massive resource hog as far as a background program goes.......Oh and also this thread as further evidence. Youre comp is probably riddled with adware while you wrote that message that took you 10 minutes due to it slugging and straining. Your cpu is also probably running at 50% because Norton is sucking the life out of it, and laughing while it does.

If fact, whenever you turn the light on in your basement. A million digital roaches scatter in all directions away from your computer as norton smells proudly like digital cornsyrup.
Last edited by E.T. the Extra Testicle; Aug 25 @ 1:38pm
Noran Aug 26 @ 3:00pm 
Originally posted by E.T. the Extra Testicle:
Originally posted by Noran:







Lol, I've used Norton Endpoint fro year now... never had an issue. Zero performace hits. No false alarm this entire time...

Maybe you kiddies should stop using consumer based products?

All of norton products are notorious for false positives and being a massive resource hog as far as a background program goes.......Oh and also this thread as further evidence. Youre comp is probably riddled with adware while you wrote that message that took you 10 minutes due to it slugging and straining. Your cpu is also probably running at 50% because Norton is sucking the life out of it, and laughing while it does.

If fact, whenever you turn the light on in your basement. A million digital roaches scatter in all directions away from your computer as norton smells proudly like digital cornsyrup.


BAHAHA I think you have a mental problem if THATS what you think lol.
I know what is running on my computer at all times, in every proccess tree, Proccess Explorer sees to that. And currently Norton proccess tree is using 16,046KB in a working set... And sure... Norton is straining my system when my 2600k has less then 1% load at idle... LOL While the C-States have half the cores parked AND the other half clock down to 1600Mhz.... sure buddy!
Whatever you say. Keep on smoking those bed bugs!
Last edited by Noran; Aug 26 @ 3:02pm
E.T. the Extra Testicle Aug 26 @ 8:29pm 
Originally posted by Noran:
Originally posted by E.T. the Extra Testicle:

All of norton products are notorious for false positives and being a massive resource hog as far as a background program goes.......Oh and also this thread as further evidence. Youre comp is probably riddled with adware while you wrote that message that took you 10 minutes due to it slugging and straining. Your cpu is also probably running at 50% because Norton is sucking the life out of it, and laughing while it does.

If fact, whenever you turn the light on in your basement. A million digital roaches scatter in all directions away from your computer as norton smells proudly like digital cornsyrup.


BAHAHA I think you have a mental problem if THATS what you think lol.
I know what is running on my computer at all times, in every proccess tree, Proccess Explorer sees to that. And currently Norton proccess tree is using 16,046KB in a working set... And sure... Norton is straining my system when my 2600k has less then 1% load at idle... LOL While the C-States have half the cores parked AND the other half clock down to 1600Mhz.... sure buddy!
Whatever you say. Keep on smoking those bed bugs!

Eset core: 5,188k
You lose. Oh wait anyone defending Norton efficiency is either an employee or 'PC- illiterate'.
Have fun defending sh♥♥♥♥it. Whatever floats your incompetent boat
Last edited by E.T. the Extra Testicle; Aug 26 @ 8:31pm
Haruka Langit Aug 26 @ 9:26pm 
some mod close this topic , people start a war here :))

Norton mistake , done
Showing 1-15 of 17 comments
< >
Per page: 15 30 50