Norton Anti-Virus Quarantined App after Update #7

[tranvandon]

Norton Anti-Virus just quarantined Millenia after Update #7. Details are:


____________________________

Details

Threat name: IDP.Generic
Threat type: Miscellaneous - This is an app that you may have unknowingly installed and that may harm your computer performance.
Status: Threat detected
Detected by: Behavioral Protection
On PC from: 7/1/25, 11:28 pm
Last Used: 7/1/25, 11:28 pm
Startup Item: No

Few users
Hundreds of users in the Norton Community have used this file.

Very new
This file was released an hour ago.

High
The file risk is high.
____________________________

Activity

Path | Type | Status
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2025.1\Paradox Launcher.exe | File | Deleted
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2025.1\Paradox Launcher.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2025.1\Paradox Launcher.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2025.1\Paradox Launcher.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2025.1\Paradox Launcher.exe | Process | Terminated
D:\SteamLibrary\steamapps\common\Millennia\Millennia.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2025.1\cpatch.exe | Process | Terminated
C:\Windows\System32\cmd.exe | Process | Terminated
D:\SteamLibrary\steamapps\common\Millennia\UnityCrashHandler64.exe | Process | Terminated
C:\Windows\System32\conhost.exe | Process | Terminated
C:\Windows\System32\conhost.exe | Process | Terminated
C:\Windows\System32\reg.exe | Process | Terminated
D:\SteamLibrary\steamapps\common\Millennia\UnityCrashHandler64.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | Process | Terminated
C:\USERS\PC\APPDATA\LOCAL\TEMP\TEMPPATCH1713933453\RESOURCES\APP.ASAR.UNPACKED\NODE_MODULES\MICROWORKS\BUILD\RELEASE\MICROWORKS.NODE | File | Deleted
C:\USERS\PC\APPDATA\LOCAL\TEMP\TEMPPATCH1713933453\RESOURCES\APP.ASAR.UNPACKED\NODE_MODULES\LAUNCHER-V2-C-BINDINGS\BUILD\RELEASE\LAUNCHER-V2-C-BINDINGS.NODE | File | Deleted
C:\USERS\PC\APPDATA\LOCAL\TEMP\TEMPPATCH1713933453\RESOURCES\APP.ASAR.UNPACKED\NODE_MODULES\GREENWORKS\LIB\GREENWORKS-WIN64.NODE | File | Deleted
C:\USERS\PC\APPDATA\LOCAL\TEMP\TEMPPATCH1713933453\RESOURCES\APP.ASAR.UNPACKED\NODE_MODULES\LAUNCHER-V2-EOS-BINDINGS\BUILD\RELEASE\LAUNCHER-V2-EOS-BINDINGS.NODE | File | Deleted
C:\USERS\PC\APPDATA\LOCAL\TEMP\TEMPPATCH1713933453\RESOURCES\APP.ASAR.UNPACKED\NODE_MODULES\LAUNCHER-V2-GFN-BINDINGS\BUILD\RELEASE\LAUNCHER-V2-GFN-BINDINGS.NODE | File | Deleted
C:\USERS\PC\APPDATA\LOCAL\TEMP\TEMPPATCH1713933453\RESOURCES\APP.ASAR.UNPACKED\NODE_MODULES\NODE-SDL2\BUILD\RELEASE\NODE-SDL2.NODE | File | Deleted
C:\Users\PC\AppData\Local\Programs\Paradox Interactive\launcher\launcher-v2.2024.17\xdelta3.exe | File | Deleted[/noparse}

[grotaclas]

It looks like it is blocking the launcher update which came out this year and not actually update 7. The launcher gets sometimes misidentified as a virus, because these kind of "Behavioral Protection" are often very broad. You could upload it to virustotal to see what other antivirus software says about it

[tranvandon]

Thanks for the information. I uploaded the launcher to virustotal[www.virustotal.com] as suggested. The results are:

• Overall rating is 0/71 with the conclusion that 'No security vendors flagged this file as malicious'
  
• All security vendors' analysis reported 'Undetected'.
  
• Zenbox verdict is non malicious with a rating of 1/100 because 'PE file contains more sections than normal'
  
• Cape Sandox verdict has two (2) concerns:
  
  1. 'Performs some HTTP requests'
     
  2. 'Binary file triggered YARA rule':
     
     • 'embedded_macho - Contains an embedded Mach-O file - Author: nex'
       
  The analysis hash is 2ac9d3ef7a2b62ddd6e725240f9ee731f2fccf8e0f85c8d8a231d3ed8fdc6833

[grotaclas]

This sounds all pretty harmless

[KhalunQalli]

The problem with your machine is that you installed NORTON Antivirus. That program is heinous and might as well be malware in and of itself. For your computer's sake, please, uninstall it. Honestly, even Windows' built-in security alone is better than having that garbage installed.