Page 1 of 1

bitfighter = virus?

PostPosted: Fri Jun 15, 2012 8:39 pm
by amgine
Hello this is amgine here to report a huge problem.

So i had bitfighter 17b on my computer and my parents uninstalled it.

so i tried to reinstall it but norton anti virus wont let me download it because it says there is a malicious file on it.

here is what it said..

(btw i cannot temporaly disable norton my parents locked it)


bitfighter-installer-017b-{...

threat name.
WS.reputation.1

anyone else have this problem?

Can you fix this?

Sincerly amgine

Re: bitfighter17b = virus?

PostPosted: Fri Jun 15, 2012 9:04 pm
by Fordcars
Well we don't really have enough info.

Re: bitfighter17b = virus?

PostPosted: Fri Jun 15, 2012 11:53 pm
by sam686
There might have been a problem about this before, probably Norton thinks the installer may wrongly think it may harm computer. It could also be the computer you used have a Norton not up to date.

But, I created a zip file that have the same files as installer, you can try.

http://sam6.25u.com/upload/Bitfighter-017B.zip

Just unzip everything and start Bitfighter, does that work?

Installers often install on all users on that one computer. One possible advantage of zip file instead of installer is, Bitfighter won't show up across all user's profiles and home folders in the same computer (good if your parents don't want to see Bitfighter in their own user profile in the same computer).

I have heard Mac OS version of Bitfighter don't use installer, the "Bitfighter.DMG" is run directly after downloaded.

Re: bitfighter17b = virus?

PostPosted: Sat Jun 16, 2012 11:05 am
by Fordcars
Yes you're right. When you download, the .dmg fires up by it self and all you have to do is to drag Bitfighter on your Hard drive.

Re: bitfighter17b = virus?

PostPosted: Mon Jun 18, 2012 6:26 am
by watusimoto
What a crock...

Here is info about that "virus":

http://www.symantec.com/security_respon ... 08-1854-99

Here's just one quote:

The system considers many aspects of a file, including file age, file download source, digital signature, and file prevalence. These attributes are combined using a proprietary algorithm to determine a file’s safety reputation. The system maintains a rating for all files rather than just malicious files. Each software file is given a GOOD, BAD or SUSPICIOUS rating.


Basically, it says the Bitfighter installer is not a well-known file, and must therefore be malware.

Bitfighter doesn't actually need to be installed at all -- if you are adventurous, there are instructions for creating a portable installation which you can put on any hard disk, USB drive, etc. on the download page. Everything will work fine. All installation does is provide an uninstall link.

Re: bitfighter17b = virus?

PostPosted: Mon Jun 18, 2012 12:53 pm
by sam686
Looking at Creating a portable install for Windows, that is a lot of instructions, and might not work because:
amgine wrote:so i tried to reinstall it but norton anti virus wont let me download it because it says there is a malicious file on it.
If the "installer.exe" can't be downloaded (anti-virus blocked / deleted immediately), and anti-virus cannot be disabled due to some parents locking it, then "download the install file" instruction won't work, sort of having to use a different computer (without Norton anti-virus) and a portable USB disk, which many people don't have.

Or simply try download Zip file, unzip everything, and play, and hope the "zip" file don't get detected like the "installer.exe" might.

Re: bitfighter17b = virus?

PostPosted: Thu Sep 20, 2012 7:02 pm
by amgine
The zip worked thanks =)

is there anyway we could somhow go around trying to chage notron thinking bitfigher is mallcous to safe?

Re: bitfighter17b = virus?

PostPosted: Fri Sep 21, 2012 11:02 pm
by sam686
As for Norton, you can try turning off "Download Intelligence", as that is what may cause false reputation threat. If you need to know how to turn it off, do some search: http://www.google.com/search?q=norton+d ... reputation

If Norton happen to be password protected, and your parents has set and knows that password, then I guess there isn't much I can help, other then you telling your parents about this.

Re: bitfighter17b = virus?

PostPosted: Tue Dec 31, 2013 8:58 pm
by amgine
update it thinks bf 19 is a virus.

Re: bitfighter17b = virus?

PostPosted: Tue Dec 31, 2013 10:06 pm
by raptor
amgine, does it still say is the 'Reputation' Virus?

Re: bitfighter17b = virus?

PostPosted: Tue Jan 07, 2014 1:11 pm
by amgine
Not sure It was marked as questionable [ Was given a choice of running or removing it] on my computer.

Other people who I have directed to BF say there anti virus say BF 19 is a virus and thus auto removed. [ I will get more info from them] People tend to not download viruses intentionaly just saying.

sorry for bumping old threads btw. added to issues on Bf source section.

Re: bitfighter = virus?

PostPosted: Tue Jan 07, 2014 7:17 pm
by Fordcars
I never got that warning, and I tried the default Windows anti-virus, Avast and Avg

Re: bitfighter = virus?

PostPosted: Tue Jan 07, 2014 10:12 pm
by amgine
Well my bitfighter updater was removed somthing about sonar.1 will have to check, and ask that user what there anti virus said.

there username was halfter or somthing.

Re: bitfighter = virus?

PostPosted: Wed Jan 15, 2014 10:42 pm
by amgine
Uh-oh this isn't good Norton Anti virus being a problem again.

virus at : bitfighter_notifier.exe

threat name: SONAR.Heuristic.112

Info at : http://www.symantec.com/security_respon ... os=windows

screenie to prove im not a liar http://i41.tinypic.com/5wyvf4.jpg

Re: bitfighter = virus?

PostPosted: Thu Jan 16, 2014 1:09 am
by Quartz
Maybe if people stopped using shitty anti-virus programs.

Seriously. It's 2014.

Re: bitfighter = virus?

PostPosted: Fri Jan 17, 2014 5:17 pm
by amgine
If you dont have any constructive to post dont post it.

still haven't found the cause of it yet.......

Re: bitfighter = virus?

PostPosted: Fri Jan 31, 2014 2:27 pm
by amgine
Bumping the issue due to importance

Re: bitfighter = virus?

PostPosted: Tue Feb 04, 2014 3:33 am
by watusimoto
I've submitted Bitfighter to Norton's false-positive reporter several times, and I'm not sure what else to do. I feeling is that we're a small enough program that they just don't care enough to inspect the program and clear it of wrongdoing.

I know it's probably not your decision, but the above posters are correct when they say that you should get rid of Norton. Not because of Bitfighter, but because it really is a load of garbage. There are much better (and free!) alternatives such as Avast, or MS Security Essentials (which is what I use).

It would be an interesting challenge to find any somewhat objective reviewer who had anything good to say about it at all.

Re: bitfighter = virus?

PostPosted: Mon Feb 17, 2014 7:58 pm
by amgine
well removing bitfighter doesn't resolve the problems with other users.

and yes it is not my decision.....

Also i think they are responding when i found the original problem it seemed to be fixed as norton never blocked it again though im not sure if it was norton or you changing bitfighter.

Also did you find the cause of the problem and a solution for it ?

Re: bitfighter = virus?

PostPosted: Sun Feb 23, 2014 10:25 am
by watusimoto
The solution is for Norton to whitelist the app, or to figure out what it is about Bitfighter that's tripping their alarms.

Either requires work for them, which means it will cost them money. Which means they probably won't do it.

None-the-less, you can report it yourself, here:

https://submit.symantec.com/false_positive/

I cannot do it for you, as it requires info about your specific product details. If you need any specific info about Bitfighter, post back here.

Re: bitfighter = virus?

PostPosted: Thu Feb 27, 2014 6:24 pm
by amgine
Well i sent the report

"CONFIRMATION
Your submission has been sent Thu Feb 27 17:22:55 PST 2014. To make another submission, click here.
Sincerely,
Symantec Security Response"

hopefully bitfighter gets removed from the bad files list now.

Re: bitfighter = virus?

PostPosted: Sat Mar 01, 2014 10:32 pm
by amgine
great news I jsut got this email.
""In relation to submission [3448287].

Upon further analysis and investigation we have verified your submission and as such this detection will be removed from our products.

The updated detection will be distributed in the next set of virus definitions, available via LiveUpdate or from our website at http://securityresponse.symantec.com/av ... nload.html

Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.

If your software updates frequently, to possibly avoid future detections of your files, please try one of the following:

1. Sign your files with Class-3 digital certificates (X.509) from a Certificate Authority

2. Submit your software to Symantec white-listing program:

https://submit.symantec.com/whitelist/


Sincerely,
Symantec Security Response
http://securityresponse.symantec.com

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you"

bf is now no longer a virus on norton :)

however I will need the admins of Bitfighter to put it on the proactive whitelist :)

Re: bitfighter = virus?

PostPosted: Mon Mar 03, 2014 2:19 am
by watusimoto
What a pleasant surprise! Congratulations!

I just applied (again) for the permanent whitelist.

Re: bitfighter = virus?

PostPosted: Sat Mar 08, 2014 2:54 pm
by amgine
Ok hope we can finally nip this in the bug hopefully whitelisting will remove the bolth the false positives :)