New virus from Steam download?

[Articulate]

So I was browsing the steam store for games and came across mobile final fantasy that has been transferred onto pc called "Mobius Final Fantasy". When I downloaded the game my norton instantly picked up a virus from the game download =


Filename: assembly-csharp.dll
Threat name: Trojan.Gen.8Full Path: c:\program files (x86)\steam\steamapps\common\mobius final fantasy\mobiusff_data\managed\assembly-csharp.dll

____________________________

____________________________


On computers as of 
2/9/2017 at 8:30:13 PM

Last Used 
2/9/2017 at 8:30:13 PM

Startup Item 
No

Launched 
No

Threat type: Heuristic Virus. Detection of a threat based on malware heuristics.


____________________________


assembly-csharp.dll Threat name: Trojan.Gen.8
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


Source: External Media


____________________________

File Actions

File: c:\program files (x86)\steam\steamapps\common\mobius final fantasy\mobiusff_data\managed\ assembly-csharp.dll Blocked
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

So I was wondering if this is happened to anyone else and want others to be aware of downloading this game. This is a "new" virus apparently to norton. Steam mods or whatever, if you see this, look into this.

[Satoru]

It's a false positive

[Articulate]

Originally posted by Satoru:

It's a false positive

Oh alright.

[Winged One]

Norton has a long history of falsely flagging game files as malicious.. still remember the outcry about it for some games like the original star wars battlefront or Sims 2..

[Marcy]

Originally posted by theseraph1:

Norton has a long history of falsely flagging game files as malicious.. still remember the outcry about it for some games like the original star wars battlefront or Sims 2..

This is because it uses a reputation system (along with many others). It's actually a very smart system. Whenever a file has a bad reputation in the database, Norton will mark it as a potential threat. If the user trusts it, they can whitelist it. I honestly think it's great. It keeps you alert and reminds you if a file or program you're about to execute is trusted or not.

[isdale]

Similar error reported by AVG today, except it reported Win/Herz.A

[Teksura]

Originally posted by Vertisea:

Originally posted by theseraph1:

Norton has a long history of falsely flagging game files as malicious.. still remember the outcry about it for some games like the original star wars battlefront or Sims 2..

This is because it uses a reputation system (along with many others). It's actually a very smart system. Whenever a file has a bad reputation in the database, Norton will mark it as a potential threat. If the user trusts it, they can whitelist it. I honestly think it's great. It keeps you alert and reminds you if a file or program you're about to execute is trusted or not.

How do non-malicious game files get marked as having a bad reputation in the first place and how is that smart? You'd think a reputation system should actually base itself on a, well, reputation. And if users keep marking these game files as trusted rather than blocking them, it stops flagging them for other people. But all you've mentioned is a simple user defined "ignore potential threat" or "trust program anyway" feature, which exists in, well, every anti-malware program.

[Elite911]

Most anti-virus software let you submit false positives VIA their website. They will check the file(s) and then if it's a false positive, update the database files and it shouldn't happen again.

[Marcy]

Originally posted by Teksura:

Originally posted by Vertisea:

This is because it uses a reputation system (along with many others). It's actually a very smart system. Whenever a file has a bad reputation in the database, Norton will mark it as a potential threat. If the user trusts it, they can whitelist it. I honestly think it's great. It keeps you alert and reminds you if a file or program you're about to execute is trusted or not.

How do non-malicious game files get marked as having a bad reputation in the first place and how is that smart? You'd think a reputation system should actually base itself on a, well, reputation. And if users keep marking these game files as trusted rather than blocking them, it stops flagging them for other people. But all you've mentioned is a simple user defined "ignore potential threat" or "trust program anyway" feature, which exists in, well, every anti-malware program.

The system checks for more than just reputation. It has behavioral patterns it uses to define the type of threat. This file is extremely recent so that also doesn't help. If it is a false positive, just trust it manually and send a sample to Symantec via file insight.

[The Giving One]

Personally, I would rather have a real virus on my computer than Norton. Norton hates Steam and games.

Just a few examples.....

http://steamcommunity.com/discussions/forum/1/348292957936793818/?tscn=1476505156#c348293073006152613
http://steamcommunity.com/discussions/forum/1/392183857628513359/#c392184289304621591
http://steamcommunity.com/discussions/forum/1/458607518209700397/?tscn=1453942737#c458607518210063348
http://steamcommunity.com/discussions/forum/1/392184289304843029/?tscn=1458633705#c392184342868920447

And, it has been on the list for as long as I can remember....

https://support.steampowered.com/kb_article.php?ref=9828-SFLZ-9289

[DONNi]

false

[Marcy]

Originally posted by The Giving One:

Personally, I would rather have a real virus on my computer than Norton. Norton hates Steam and games.

Just a few examples.....

http://steamcommunity.com/discussions/forum/1/348292957936793818/?tscn=1476505156#c348293073006152613
http://steamcommunity.com/discussions/forum/1/392183857628513359/#c392184289304621591
http://steamcommunity.com/discussions/forum/1/458607518209700397/?tscn=1453942737#c458607518210063348
http://steamcommunity.com/discussions/forum/1/392184289304843029/?tscn=1458633705#c392184342868920447

And, it has been on the list for as long as I can remember....

https://support.steampowered.com/kb_article.php?ref=9828-SFLZ-9289

Quite clearly all those people are doing something wrong. I've used Norton for years, even on the most aggressive settings possible, and I've never had any issues. And I use loads of unknown, unpopular and software that's constantly renewed. I've also never had any issues with it or steam. People keep being stuck in the old days when Symantec sucked. Those days are long gone.

[The Giving One]

Originally posted by Vertisea:

Quite clearly all those people are doing something wrong. I've used Norton for years, even on the most aggressive settings possible, and I've never had any issues. And I use loads of unknown, unpopular and software that's constantly renewed. I've also never had any issues with it or steam. People keep being stuck in the old days when Symantec sucked. Those days are long gone.

Yes, and this forum is full of cases where user A does not have issues and user B does. Some do say that Norton has improved over time, but still. I would never have it installed on my computer. Thanks.

[Marcy]

Originally posted by The Giving One:

Originally posted by Vertisea:

Quite clearly all those people are doing something wrong. I've used Norton for years, even on the most aggressive settings possible, and I've never had any issues. And I use loads of unknown, unpopular and software that's constantly renewed. I've also never had any issues with it or steam. People keep being stuck in the old days when Symantec sucked. Those days are long gone.

Yes, and this forum is full of cases where user A does not have issues and user B does. Some do say that Norton has improved over time, but still. I would never have it installed on my computer. Thanks.

That's fair. Whatever works for you. My experience with it has been great. I'm sorry it hasn't been for you (and others).

[ KARR™]

Here it is being detected by North in Rocket League :

http://psyonix.com/forum/viewtopic.php?f=34&t=32031&p=316428

Here it is in a non Steam AutoCAD program :

https://community.norton.com/en/forums/autotrax-dex-electronics-cad-now-identified-trojan-threat

Norton no likey!