It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Just bought this fantastic game a few days ago, played for an hour and then my Norton virus checker decided to block access to the game exe file and delete some of the dll's. The game no longer runs. Norton considers some of the files to be suspicious. I know I can bypass this but then, what would be the point of a virus protection system if I have to take responsibility myself for approving suspect files? That would be like buying a guard dog and barking myself. I'm hoping Larian will get Norton to whitelist these game files so I can play this good looking game. I have sent an early access report to Larian detailing the problem and the files affected. Norton users beware.
avatar
gonrodnot: That would be like buying a guard dog and barking myself.
It would be more like telling the dog to shut up when it starts barking at the mailman.

In any case, with the full release less than a month away, I don't think an effort to get Norton to fix this would do much good before the relevant files change again.
avatar
gonrodnot: That would be like buying a guard dog and barking myself.
avatar
Raze_Larian: It would be more like telling the dog to shut up when it starts barking at the mailman.

In any case, with the full release less than a month away, I don't think an effort to get Norton to fix this would do much good before the relevant files change again.
Thank you for your reply. In the meantime I will request a refund from Gog - just in case it doesn't get sorted out.

Your "barking at the mailman" analogy is good except for the fact that in this case it's impossible for the householder to know for certain if the dog is barking at the mailman or a burglar

BTW the same thing has happened to my copy of DOS EE except that it is only various editor files in The Divinity Engine which have been affected. I really wanted to use the editor and was looking forward to using the editor in DOS 2 (more so than GMM).

Anyway time will tell, thank you again :)
Post edited August 18, 2017 by gonrodnot
high rated
avatar
gonrodnot: Your "barking at the mailman" analogy is good except for the fact that in this case it's impossible for the householder to know for certain if the dog is barking at the mailman or a burglar
That depends on if you've had the same mailman for the last 15 years with no suspicion of being a burglar by anyone else on his route, or he has undergone a background check and security screenings, etc.

Steam and GOG get files directly from developers and have their own security procedures. It is extremely unlikely either would distribute malware.

D:OS 2 has not been updated for 2.5 months. If it were infected, that would mean everyone who has the current update is also affected, and yet nobody else has reported a problem in that time. That is even more true for the D:OS EE Editor, with no updates for more than a year.

Before white-listing any files, you can upload them to the VirusTotal website. If 40 or 50 virus scanners say a file is fine, and one claims a virus, it is very, very likely a false positive.
avatar
gonrodnot: Your "barking at the mailman" analogy is good except for the fact that in this case it's impossible for the householder to know for certain if the dog is barking at the mailman or a burglar
avatar
Raze_Larian: That depends on if you've had the same mailman for the last 15 years with no suspicion of being a burglar by anyone else on his route, or he has undergone a background check and security screenings, etc.

Steam and GOG get files directly from developers and have their own security procedures. It is extremely unlikely either would distribute malware.

D:OS 2 has not been updated for 2.5 months. If it were infected, that would mean everyone who has the current update is also affected, and yet nobody else has reported a problem in that time. That is even more true for the D:OS EE Editor, with no updates for more than a year.

Before white-listing any files, you can upload them to the VirusTotal website. If 40 or 50 virus scanners say a file is fine, and one claims a virus, it is very, very likely a false positive.
Thank you for your detailed response. I can see this from your point of view but my own viewpoint is a little different. I have trusted Norton for years and my computer has been safe for all those years because of Norton and because I am as carefull as possible.

* The mailman analogy is getting a bit old now but in this instance I have no idea what my "mailman" looks like. He could be some Trojan bearing gifts for all I know. He could have been substituted for another "mailman. He could be the same "mailman" but he has been hiding his evil intent until the right moment :) Ok, it's silly now, but do you catch my drift? With the recent internet virus emergencies I think it might be as well to be a little paranoid for a while.

* I believe some developers have files in the games that report back gameplay information to the developer. This will be useful of course but perhaps it could be a vulnerability that could be exploited? I don't know and, if we're honest, neither does anyone else for certain. Hackers find vulnerabilities in Windows OS systems regularly I'm told. Are all game developers better funded and organised than Microsoft? (Some might be :)

Anyway, you are probably correct on all points, you obviously know much more about this than I do. However I am going to stick to my paranoid methods and not touch the files that Norton flags as unsafe - and get my money back where I can. Maybe if everyone did that two things might happen. 1) More developers would complain to Norton and ensure their suspect files are whitelisted quickly. 2) Norton might fine tune their detection methods to cut down on possible "false positives".

There is one other possibilty of course - perhaps Norton's detection methods are fine?
avatar
Raze_Larian: That depends on if you've had the same mailman for the last 15 years with no suspicion of being a burglar by anyone else on his route, or he has undergone a background check and security screenings, etc.

Steam and GOG get files directly from developers and have their own security procedures. It is extremely unlikely either would distribute malware.

D:OS 2 has not been updated for 2.5 months. If it were infected, that would mean everyone who has the current update is also affected, and yet nobody else has reported a problem in that time. That is even more true for the D:OS EE Editor, with no updates for more than a year.

Before white-listing any files, you can upload them to the VirusTotal website. If 40 or 50 virus scanners say a file is fine, and one claims a virus, it is very, very likely a false positive.
avatar
gonrodnot: Thank you for your detailed response. I can see this from your point of view but my own viewpoint is a little different. I have trusted Norton for years and my computer has been safe for all those years because of Norton and because I am as carefull as possible.

* The mailman analogy is getting a bit old now but in this instance I have no idea what my "mailman" looks like. He could be some Trojan bearing gifts for all I know. He could have been substituted for another "mailman. He could be the same "mailman" but he has been hiding his evil intent until the right moment :) Ok, it's silly now, but do you catch my drift? With the recent internet virus emergencies I think it might be as well to be a little paranoid for a while.

* I believe some developers have files in the games that report back gameplay information to the developer. This will be useful of course but perhaps it could be a vulnerability that could be exploited? I don't know and, if we're honest, neither does anyone else for certain. Hackers find vulnerabilities in Windows OS systems regularly I'm told. Are all game developers better funded and organised than Microsoft? (Some might be :)

Anyway, you are probably correct on all points, you obviously know much more about this than I do. However I am going to stick to my paranoid methods and not touch the files that Norton flags as unsafe - and get my money back where I can. Maybe if everyone did that two things might happen. 1) More developers would complain to Norton and ensure their suspect files are whitelisted quickly. 2) Norton might fine tune their detection methods to cut down on possible "false positives".

There is one other possibilty of course - perhaps Norton's detection methods are fine?
Or dump Norton bloatware products for good. I have not recommended Norton for any of my clients in more than a decade and won't start again. Much better free and paid security products out there in 2017. Give it a try and get back to enjoying these great games this Dev is making.
ESET just did the same thing. I cannot play this game anymore.
avatar
jizzlobber85: ESET just did the same thing.
It should have options to un-quarantine files and exclude the game / My Documents folder from being scanned.
So it is not a virus?
avatar
jizzlobber85: So it is not a virus?
There's no viruses in install packages.

- Check your carantine folder
- Send suspicious files to VirusTotal,
- See that it's clean,
- Dump Norton for good, buy DrWeb or Kasper
- Play Divinity.
Post edited September 22, 2017 by Sten_MkIIs
use ESET and not Norton. I have never had a issue on Steam, so I have my suspicion from gog.
Using NIS and haven't had any issues with D:OS, D:OS EE, D:OS 2 So I'd say it's likely something else but really the OP should if he's having issues just add the GOG Games folder to an exclusion

- Settings, Antivirus
- Scans and Risks
- Exclusions / Low Risks
- Items to Exclude from Auto-Protect, SONAR and Download Intelligence Detection - Configure
- Add the folder tick all sub folders.

Likely if he's getting any issues it'll be WS.Reputation which is perhaps the most annoying thing AV software have come up with of late.. 'your files new.. we won't trust it ' .. *rolls eyes*
avatar
jizzlobber85: use ESET and not Norton. I have never had a issue on Steam, so I have my suspicion from gog.
I also use ESET and the game is not getting flagged. There's absolutely no way GOG is giving you viruses; remember, false positives are a thing. Try adjusting your settings or whitelisting the entire Original Sin 2 folder.