PDA

View Full Version : Norton Antivirus + version 1.11.06b



flavicolo
03-07-2011, 11:58 AM
I recently upgraded (1 hour ago) the holdem manager to the latest version. It was working perfectly, until the Norton Antivirus suddenly blocked it

Right now the software import the hands regularly, but the HUD doesnt work anymore.

How can i fix my problem?

Thanks in advance.

http://i651.photobucket.com/albums/uu231/flavicolo/hm1.jpg

http://i651.photobucket.com/albums/uu231/flavicolo/norton1.jpg

psk
03-07-2011, 03:40 PM
same here, 1.11.06b + Norton Internet Security + win7

10JQKA
03-07-2011, 03:48 PM
Go into Norton and allow HM.

Veteran68
03-07-2011, 04:22 PM
Go into Norton and allow HM.

This. More specifically:

1. Open up the File Insight window again (the one on the far left in your screenshot). You can get here again from the Norton history, then double-click or click "More Details." Note at the bottom of the File Insight window there is an "Options" link. Click that and tell it to restore hmhud.exe and add an exception for it.

2. To take it a step further, add an exception to both exception lists in the Norton settings. Add the HEM folder and check the "include subfolders" checkbox. This should prevent HEM from ever being scanned again, otherwise at every HEM update you'll run into these problems again (HUD slow to start, being quarantined, etc.).

This type of false hit occurs due to how the HUD process injects itself and/or "tampers" with the poker client process. This sort of thing is a common practice among malware and thus is often treated suspiciously by AV and anti-malware tools.

flavicolo
03-07-2011, 07:40 PM
This. More specifically:

1. Open up the File Insight window again (the one on the far left in your screenshot). You can get here again from the Norton history, then double-click or click "More Details." Note at the bottom of the File Insight window there is an "Options" link. Click that and tell it to restore hmhud.exe and add an exception for it.

2. To take it a step further, add an exception to both exception lists in the Norton settings. Add the HEM folder and check the "include subfolders" checkbox. This should prevent HEM from ever being scanned again, otherwise at every HEM update you'll run into these problems again (HUD slow to start, being quarantined, etc.).

This type of false hit occurs due to how the HUD process injects itself and/or "tampers" with the poker client process. This sort of thing is a common practice among malware and thus is often treated suspiciously by AV and anti-malware tools.

Thank you very much for your help!

Patvs
03-08-2011, 12:06 AM
I would turn off SONAR completely.
SONAR likes to delete files randomly it doesn't recognize. Including if you download stuff.

Patvs
03-09-2011, 06:05 PM
Update for Norton SONAR, read: SONAR Protection quarantines files that are already excluded from future scans in my Norton 2010 product | Norton Support (http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20090903182949EN)

Veteran68
03-09-2011, 06:50 PM
Update for Norton SONAR, read: SONAR Protection quarantines files that are already excluded from future scans in my Norton 2010 product | Norton Support (http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20090903182949EN)
I think I noticed that happen with 2010 a few times, actually, but I've been on 2011 since it came out last year some time, and I've not had the issue. I expect most Norton users that have kept up to date aren't affected by this bug. If you're still running 2010 and have an active subscription, you should probably upgrade to 2011 (it's a free update) instead of bothering with this patch.

Patvs
07-17-2011, 05:04 AM
Issues with HoldemManager 1.11.07a with Norton:

Make sure Norton doesn't quarantine the file hmimport.exe.*
Restore that file (or reinstall the HoldemManager update).

*Add the file to Norton's (or Norton's SONAR's) exceptions list. Do the same for hmhud.exe and holdemmanager.exe

Read: http://faq.holdemmanager.com/questions/339/Software+Security+Problems+%28Firewall%29