Norton Internet Security & Pirates@Home

Author	Message
Brian Uitti Volunteer tester Send message Joined: 9 Sep 04 United States Project Blue Book Credit: 4,573.7 RAC: 0.00 Joined: Sep 9, 2004 Verified: Mar 4, 2010 Punishment: Canon Fodder	Message 8254 - Posted: 3 Jan 2009 \| 15:44:09 UTC
One one of my machines, I get a security hit with Norton against Pirates executable: Norton Internet Security Log wrote: 1/2/2009 10:47 PM,High,starboard_6.01_windows_intelx86.exe detected by SONAR,Removed,Resolved - No Action,SONAR,2009.01.02.025,108.2.4.3,starboard_6.01_windows_intelx86.exe,File Based,Fully removed, This is Norton Internet Security vesion 16.2.0.7 on a machine with Windows XP Home Edition, Service Pack 3. (I have Norton Internet Security version 15.5.0.23 on a machine with Windows Vista Home Premium Service Pack 1 that DOES NOT report this problem. I also have McAfee on another machine that also DOES NOT see a problem with this pirate program. And Symantic Antivirus 10.1.5.5000 on a machine with Windows XP Professional v.2002 Service Pack 3 that also DOES NOT report the security problem.) Curiously enough, when the "threat" is detected, a popup window asks for a computer reboot to allow Norton to delete the executable file.. (presumably that would terminate the executable from running.. ) meanwhile, the executable is running.. and I'll just snooze the reboot until the pirate execuable (work unit) is completed and posted. Unfortunately, I haven't figured out (yet) how to report the executable as "safe", that would prevent this "problem". This verion of Norton also has a problem with nqueen_5.30_windows_intelx86.exe from NQueens@Home Project, but no other BOINC project that I'm running on this machine. Thoughts, Comments, Questions? // Brian ____________
ID: 8254 \| Rating: 0 \| rate: / Reply Quote

Scott Brown Volunteer tester Send message Joined: 25 Jul 04 United States Duke University Credit: 38,955.3 RAC: 0.00 Joined: Jul 25, 2004 Verified: Oct 7, 2011 Dubloons: 3 Pieces of Eight: 11 Punishment: Keel Haul	Message 8255 - Posted: 3 Jan 2009 \| 17:19:23 UTC
See recent malware/virus notification problems here: http://pirates.spy-hill.net/forum_thread.php?id=1008 ____________
ID: 8255 \| Rating: 0 \| rate: / Reply Quote

Brian Uitti Volunteer tester Send message Joined: 9 Sep 04 United States Project Blue Book Credit: 4,573.7 RAC: 0.00 Joined: Sep 9, 2004 Verified: Mar 4, 2010 Punishment: Canon Fodder	Message 8258 - Posted: 3 Jan 2009 \| 20:55:27 UTC - in response to Message 8255. Last modified: 3 Jan 2009 \| 20:55:55 UTC
Scott Brown wrote: See recent malware/virus notification problems here: Thanks!
ID: 8258 \| Rating: 0 \| rate: / Reply Quote

Wormholio Captain Send message Joined: 6 Jun 04 United States Away Credit: 4,009.8 RAC: 0.00 Joined: Jun 6, 2004 Verified: Mar 13, 2008 Dubloons: 3 Pieces of Eight: 10 Punishment: Aztec curse	Message 8260 - Posted: 4 Jan 2009 \| 3:22:15 UTC - in response to Message 8254.
Thank you for a very complete report. It's already been noted that there is another thread about virus detection, but not for Norton, and the information you provided could prove useful (or not -- you never know, but that's why you record as much as possible). Brian Uitti wrote: This verion of Norton also has a problem with nqueen_5.30_windows_intelx86.exe from NQueens@Home Project, but no other BOINC project that I'm running on this machine. I wonder what version of BOINC that app was built with, how recently it was built, and if there is something in the common code that triggers the virus alert. Not that I know how to answer those questions, but I can still wonder out-loud about it :-) ____________ -- Eric Myers "Education is not the filling of a pail, but the lighting of a fire." -- William Butler Yeats
ID: 8260 \| Rating: 0 \| rate: / Reply Quote

KSMarksPsych Volunteer tester Send message Joined: 19 Jan 06 United States Machinae Supremacy Credit: 4,127.4 RAC: 0.00 Joined: Jan 19, 2006 Verified: Sep 24, 2010 Dubloons: 3 Pieces of Eight: 8 Punishment: Mess Duty	Message 8261 - Posted: 4 Jan 2009 \| 8:38:00 UTC
FWIW, the executables at NQueens were uploaded to the server during the second week of November. No idea of the API version though. ____________ Kathryn :o) The BOINC FAQ Service The Unofficial BOINC Wiki The Trac System
ID: 8261 \| Rating: 0 \| rate: / Reply Quote

Author

Message

Brian Uitti
Volunteer tester
Avatar

Send message
Joined: 9 Sep 04

United States
Project Blue Book
Credit: 4,573.7
RAC: 0.00

Joined: Sep 9, 2004
Verified: Mar 4, 2010
Punishment: Canon Fodder

One one of my machines, I get a security hit with Norton against Pirates executable:

Norton Internet Security Log wrote:

1/2/2009 10:47 PM,High,starboard_6.01_windows_intelx86.exe detected by SONAR,Removed,Resolved - No Action,SONAR,2009.01.02.025,108.2.4.3,starboard_6.01_windows_intelx86.exe,File Based,Fully removed,

This is Norton Internet Security vesion 16.2.0.7 on a machine with Windows XP Home Edition, Service Pack 3.

(I have Norton Internet Security version 15.5.0.23 on a machine with Windows Vista Home Premium Service Pack 1 that DOES NOT report this problem. I also have McAfee on another machine that also DOES NOT see a problem with this pirate program. And Symantic Antivirus 10.1.5.5000 on a machine with Windows XP Professional v.2002 Service Pack 3 that also DOES NOT report the security problem.)

Curiously enough, when the "threat" is detected, a popup window asks for a computer reboot to allow Norton to delete the executable file.. (presumably that would terminate the executable from running.. ) meanwhile, the executable is running.. and I'll just snooze the reboot until the pirate execuable (work unit) is completed and posted.

Unfortunately, I haven't figured out (yet) how to report the executable as "safe", that would prevent this "problem".

This verion of Norton also has a problem with nqueen_5.30_windows_intelx86.exe from NQueens@Home Project, but no other BOINC project that I'm running on this machine.

Thoughts, Comments, Questions?

// Brian
____________

ID: 8254 | Rating: 0 | rate:

Reply Quote

Scott Brown
Volunteer tester
Avatar

Send message
Joined: 25 Jul 04

United States
Duke University
Credit: 38,955.3
RAC: 0.00

Joined: Jul 25, 2004
Verified: Oct 7, 2011
Dubloons: 3
Pieces of Eight: 11
Punishment: Keel Haul

See recent malware/virus notification problems here:

http://pirates.spy-hill.net/forum_thread.php?id=1008

____________

ID: 8255 | Rating: 0 | rate:

Reply Quote

Brian Uitti
Volunteer tester
Avatar

Send message
Joined: 9 Sep 04

United States
Project Blue Book
Credit: 4,573.7
RAC: 0.00

Joined: Sep 9, 2004
Verified: Mar 4, 2010
Punishment: Canon Fodder

Scott Brown wrote:

See recent malware/virus notification problems here:

Thanks!

ID: 8258 | Rating: 0 | rate:

Reply Quote

Wormholio
Captain
Avatar

Send message
Joined: 6 Jun 04

United States
Away
Credit: 4,009.8
RAC: 0.00

Joined: Jun 6, 2004
Verified: Mar 13, 2008
Dubloons: 3
Pieces of Eight: 10
Punishment: Aztec curse

Thank you for a very complete report. It's already been noted that there is another thread about virus detection, but not for Norton, and the information you provided could prove useful (or not -- you never know, but that's why you record as much as possible).

Brian Uitti wrote:

This verion of Norton also has a problem with nqueen_5.30_windows_intelx86.exe from NQueens@Home Project, but no other BOINC project that I'm running on this machine.

I wonder what version of BOINC that app was built with, how recently it was built, and if there is something in the common code that triggers the virus alert. Not that I know how to answer those questions, but I can still wonder out-loud about it :-)

____________
-- Eric Myers

"Education is not the filling of a pail, but the lighting of a fire." -- William Butler Yeats

ID: 8260 | Rating: 0 | rate:

Reply Quote

KSMarksPsych
Volunteer tester
Avatar

Send message
Joined: 19 Jan 06

United States
Machinae Supremacy
Credit: 4,127.4
RAC: 0.00

Joined: Jan 19, 2006
Verified: Sep 24, 2010
Dubloons: 3
Pieces of Eight: 8
Punishment: Mess Duty

FWIW, the executables at NQueens were uploaded to the server during the second week of November.

No idea of the API version though.
____________
Kathryn :o)
The BOINC FAQ Service
The Unofficial BOINC Wiki
The Trac System

ID: 8261 | Rating: 0 | rate:

Reply Quote

Post to thread