DriverPacks.net Forum - Norton Internet Security Detects Roe.exe as Suspicious.Cloud.2

Re: Norton Internet Security Detects Roe.exe as Suspicious.Cloud.2

null@example.com (OverFlow) — Thu, 23 Dec 2010 08:11:56 +0000

ROE.exe is a program that will create an entry in the registry to run the DriverPacks Finisher the next time a computer starts. This is neccessary to install the driverpacks during windows setup.

This type of action might / would seem suspicious to a virus scanner. (hey it found a program that wants to modify the registry and auto run a program! That is kinda suspicious!) It is however by design and neccessary and expected.

Your scanner is warning you about a potential danger (IE Suspicious). Since you know the file is there as an integral part of a program that you intentionally downloaded (IE It's no longer suspicious, You know exactly what it is.)... you can ignore it. Wouldn't hurt to use mr_smartepants hash as a double check that it is the file we ship with our package .

Suspicious is WAY DIFFERENT than a "positive".

Re: Norton Internet Security Detects Roe.exe as Suspicious.Cloud.2

null@example.com (mr_smartepants) — Thu, 23 Dec 2010 06:30:21 +0000

Symantec Endpoint Protection is perfectly happy with the file at my end. The MD5 hash of the ROE.exe file I have is: 3085439b8dd7b0169bf7c06143afa9f6

Norton Internet Security Detects Roe.exe as Suspicious.Cloud.2

null@example.com (techuser) — Thu, 23 Dec 2010 04:47:18 +0000

The program located in ..\dps_base_1006\bin\wnt5_x86-32\roe.exe gets automatically removed from Norton Internet Security as it believes that this is a virus based on malware heuristics. I was not sure if I should go ahead and allow roe.exe or not. I wanted to verify with the authors that the latest version of roe.exe has not somehow been infected. Please post a response on the main page as to wither or not this file is safe to "Restore & exclude this file" which is under options for Norton Internet Security.