Norton Antivirus and SpeedRunners

[Haverstash]

Anybody know if Norton Antivirus correctly identified SpeedRunners.exe as containing a virus?

Filename: SpeedRunners.exe
Threat name: Heur.AdvML.CFull Path: E:\GAMES\steamapps\common\SpeedRunners Demo\SpeedRunners.exe

____________________________

____________________________


On computers as of 
2019-02-13 at 11:37:03 PM

Last Used 
2019-02-13 at 11:39:03 PM

Startup Item 
No

Launched 
No

Threat type: Heuristic Virus. Detection of a threat based on malware heuristics.


____________________________


SpeedRunners.exe Threat name: Heur.AdvML.C
Locate


Many Users
Thousands of users in the Norton Community have used this file.

Mature
This file was released 4 years 2 months ago.

High
This file risk is high.


____________________________


Source: External Media

Source File:
SpeedRunners.exe

____________________________

File Actions

File: E:\GAMES\steamapps\common\SpeedRunners Demo\ SpeedRunners.exe Removed
____________________________


File Thumbprint - SHA:
96305b5f9c718d3ab8a4c1a690c3bcdd83d5a62397b76c43a97d4469ccfa47b1
File Thumbprint - MD5:
7927b4045b576677afc86221d9df4ef7

[ReBoot]

Because Norton has mistaken paranoia for caution. The "malware" name starting with "Heur" is a telltale sign of a HEURistic going awry.

Tell Norton to shut up, put the game folder (or better, the whole Steam folder) onto it's exception list.

[AmsterdamHeavy]

False Positive. I have had Speedrunners installed for years and no detection, ever.

[ReBoot]

Originally posted by Raelic:

You realize that the place he downloaded his from is very likely not the same place you downloaded yours from right? And just because it's labeled the same thing doesn't mean it hasn't been altered.

Dude, its a false-positive. Blindly trusting AVs is a rather horrible idea, ESPECIALLY when it starts with "Heur"

[Runkel]

Originally posted by Raelic:

You realize that the place he downloaded his from is very likely not the same place you downloaded yours from right? And just because it's labeled the same thing doesn't mean it hasn't been altered.

It's a game downloaded by steam