topic Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security HELP! in Installation & update

Archicad 17 [5019] Hotfix6 - Norton Internet Security HELP!

Miha_M — Wed, 05 Feb 2014 10:38:53 GMT

Hi! Archicad 17 prompted me to download the latest hotfix. I did. I Installed the hotfix 5019. After that I switched off my box and left the office. When I came back, I turned the box on and my Norton Internet Security started to remove everything, every single file which was updated. Now, as you can imagine, Archicad is not working anymore.

Now I do not want to go and remove every file from the Quarantine, since every file has been labeled as infected with some WS.Reputation.1 virus.

Is that a false alarm or are these files infected? Could Graphisoft please give us some information? ASAP, I have work to do!

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Marton Kiss — Wed, 05 Feb 2014 13:23:21 GMT

Miha_M wrote:
Hi! Archicad 17 prompted me to download the latest hotfix. I did. I Installed the hotfix 5019. After that I switched off my box and left the office. When I came back, I turned the box on and my Norton Internet Security started to remove everything, every single file which was updated. Now, as you can imagine, Archicad is not working anymore.

Now I do not want to go and remove every file from the Quarantine, since every file has been labeled as infected with some WS.Reputation.1 virus.

Is that a false alarm or are these files infected? Could Graphisoft please give us some information? ASAP, I have work to do!

Miha,

most probably this is a false alarm. Based on Norton's website files may be marked as infected, if their reputation has a low score. More info: http://www.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854-99

As this is a new package, it might be possible that such automated systems don't know about our files. Virus checking is part of our standard Quality Control processes, so we do everything to make sure our files are virus free. Of course they can get infected later - after the installation, but as you had your Anti Virus on all the time, this is unlikely.

Regards,
Marton

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Anonymous — Wed, 05 Feb 2014 14:56:54 GMT

Hello,

Sorry for the trouble. I am Vineeth and I am from the Norton Support team.

Can you please submit the files to us at http://www.Norton.com/fp so we can review them and white list if needed.

Thanks!

Vineeth
Norton Support

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Miha_M — Wed, 05 Feb 2014 15:33:05 GMT

Can you please submit the files to us at http://www.Norton.com/fp so we can review them and white list if needed.

Hi! I was at the Norton website and have put down the download link for the update. As I could submit the details of only one detected file you have to know that there are over 50 files with the same problem.

... and I still can not use Archicad.

Am I the only one with Archicad and NIS out here? Nobody else seems to have this problem.

One more thing - since somebody from Norton was here - could you please change NIS so it could be possible to restore from the quarantine more than one file at once?

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Anonymous — Thu, 06 Feb 2014 11:58:33 GMT

Miha_M wrote:
Can you please submit the files to us at http://www.Norton.com/fp so we can review them and white list if needed.
Hi! I was at the Norton website and have put down the download link for the update. As I could submit the details of only one detected file you have to know that there are over 50 files with the same problem.

... and I still can not use Archicad.

Am I the only one with Archicad and NIS out here? Nobody else seems to have this problem.

One more thing - since somebody from Norton was here - could you please change NIS so it could be possible to restore from the quarantine more than one file at once?

Hello,

It is not recommended to restore multiple files from Quarantine. There are chances that this option is abused and a real threat is restored.

Is the program that you try to use digitally signed?

Thanks!

Vineeth
Norton Support

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Marton Kiss — Thu, 06 Feb 2014 12:05:39 GMT

NortonSupport wrote:
Is the program that you try to use digitally signed?

Vineeth,

our installers are digitally signed. You can download a trial version of our software - GRAPHISOFT ArchiCAD 17 - from here: https://myarchicad.com/

The latest update that resulted this problem on Miha's computer can be downloaded from here: http://www.graphisoft.com/downloads/archicad/hotfixes/AC17/AC17-5014to5019-ReleaseNotes.html

(Download links are close to the end of the page)

Marton

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Anonymous — Thu, 06 Feb 2014 14:22:43 GMT

Marton wrote:
NortonSupport wrote:
Is the program that you try to use digitally signed?
Vineeth,

our installers are digitally signed. You can download a trial version of our software - GRAPHISOFT ArchiCAD 17 - from here: https://myarchicad.com/

The latest update that resulted this problem on Miha's computer can be downloaded from here: http://www.graphisoft.com/downloads/archicad/hotfixes/AC17/AC17-5014to5019-ReleaseNotes.html

(Download links are close to the end of the page)

Marton

Thank you Marton!

Can you please submit the file to us at http://www.Norton.com/fp we can whitelist it?

Vineeth
Norton Support

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Marton Kiss — Thu, 06 Feb 2014 14:30:50 GMT

NortonSupport wrote:
Can you please submit the file to us at http://www.Norton.com/fp we can whitelist it?

Sure, posted both the main installer and the latest update on the site.

Marton

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Anonymous — Fri, 07 Feb 2014 16:22:52 GMT

Marton wrote:
NortonSupport wrote:
Can you please submit the file to us at http://www.Norton.com/fp we can whitelist it?
Sure, posted both the main installer and the latest update on the site.

Marton

Thank you! You would receive an update in two days. If you don't receive an update, please send me the submission tracking number.

Thanks!

Vineeth
Norton Support

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Miha_M — Mon, 10 Feb 2014 10:48:12 GMT

Any news, Graphisoft, NortonSupport?

Every time I work with Archicad 17 I get a prompt from NIS to restart my box. And every time I do that NIS throws more files into quarantine, which I have to restore one by one to get Archicad working again. Now for the first time I can not restore one file, the interactive schedule.apx. NIS said "Failed to restore".

Every time it's new files. The ones I have restored before don't get removed, although I don't exclude them from future scans. It looks like now NIS shifts to the quarantine only new files which get activated during the use of Archicad.

What could cause this? The spec of my box and my OS are in my signature. I have a valid Archicad license on a usb WIBU dongle and I am on the Archicad Club package. NIS I have recently updated with a new 1 year license and it sucks it's updates from the web on a regular basis by itself.

It's getting a bit annoying.

edited: Since without this .apx Archicad wouldn't run I had to do a new install and update. Now it's all over again. NIS all over the new files, which are moved to quarantine. Please help, I can't do my work without the tools.

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Marton Kiss — Mon, 10 Feb 2014 12:24:00 GMT

Miha,

try to exclude your GRAPHISOFT folder from the ones that NIS scans. With that you should be able to continue to work.

I provided Norton with our latest patch and general installer, but I got back an automatic email that non of these are affected. So please try to upload the files from your computer so that they can analyze those and fine tune their engine.

Marton

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Miha_M — Mon, 10 Feb 2014 14:53:34 GMT

...try to exclude your GRAPHISOFT folder from the ones that NIS scans. With that you should be able to continue to work.

I did.

So please try to upload the files from your computer so that they can analyze those and fine tune their engine.

Sorry, but I don't want to spend any more time on this. It's all the files which have been updated, and I would have to do it by the "one by one" Norton policy.

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Miha_M — Wed, 19 Nov 2014 09:23:39 GMT

I should probably start a new post, since I have the same NIS problems with Archicad 18. Norton keeps deleting files as they have low trust factor. I have a new solution approach - after the update, after running Archicad, NIS goes into action and reminds me that I have to restart the computer for virus removal. I don't do it, wait until I finish office hours and turn off the computer. The next day some files are missing (Archicad opengl for example), or Archicad doesn't start at all. So I have to visit the NIS Quarantine and re-enable those files and exclude them from future virus checks.

This works, but it's a pain in my behind that i have to bother with it. Please, Graphisoft, could you somehow manage that updated files get whitelisted with Norton? It's strange though that I seem to be the only one having this problems. Is nobody else using Archicad & NIS on one computer or am i the only one that has this strange fake virus detections?

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security H

Karl Ottenstein — Wed, 19 Nov 2014 17:10:36 GMT

Miha_M,

I re-scanned this thread quickly and may have missed it.... had you changed any of the default NIS settings? For example, 'SONAR' Advanced Mode can be set to "Aggressive", but is "Automatic" by default. Same with Boot Time Protection, Heuristic Protection and perhaps other settings... It could be that the "Aggresive" setting is the issue and the reason others have not been reporting this?

If that isn't the issue, under Exclusions / Low Risk you can configure "Items to Exclude from Scans" and can add your ArchiCAD folder there. There is an option to add Folders or Files. You said you did that, but then the files that you are saying are getting quarantined must be coming from somewhere else? Have you searched to find them? Maybe they are system DLL's or WIBU files from another folder that need to also be excluded from the scan?

I suppose the risk here is an evil worm that infects your exe and dll files and you've not said to ignore this folder... but frankly, I've never known anyone who practices safe surfing to get such a thing.

(I'm looking at the N360 screens which are slightly different from NIS.)

Karl

Re: Archicad 17 [5019] Hotfix6 - Norton Internet Security HELP!

Miha_M — Thu, 25 Jul 2019 15:20:53 GMT

Hi Karl,

I was browsing my previous posts and found your reply, which I have missed then.
At that time, as now and before, I have never altered any special NIS settings, as the defaults have been doing a good job. I was very much in distress because of that situation, maybe that's why I have missed your reply.

The solution to this problem I found was not to install every Archicad update as soon as I got reminded that one exist by Archicad. As I open Archicad each and every working day I was, back then, probably a very fast updater, as I downloaded and installed that update immediately. Now I ignore this reminder for some days and I never had such a problem again despite still beeing a NIS user. Maybe also Norton changed their false positive heuristic somehow.