Virus ?

Why is it that Norton, reports a suspicious cloud.7.F virus in the file Bmui.tx during installation of Version 13, and deletes the file?  What is the purpose of this file ?

Comments

  • Hi Raam,

    Issues with Norton has previously been struck. Possibly this is the save kind of thing. See http://www.bricsys.com/common/knowledge/topic.jsp?id=316

    If you're concerned try another anti-virus application, such as AVG to see whether it flags the same issue.

    Regards,

    Jason Bourhill

    CAD Concepts

  • An aid in deciding whether a report is a false positive is to check the file against multiple scanners. I believe there are other sites that offer this service but the one I use is a free on-line tool at Virus Total. Upload the suspicious file and it is run against a battery of scanners.
  • I wouldn't worry about it.
    I uploaded it to virustotal where it was scanned by 44 AVs. Only Symantec & PCTools flagged it as a potential virus.
    I'd also submit to Symantecas a false positive: https://submit.symantec.com/false_positive/
  • Thank's. I'm relived.
    But what is the purpose of this file ?
  • "bmui.tx" is from "BricsCAD Modeling UserInterface" :-)
    Btw., all those false alarms by Norton are caused by their default "heuristics" setting ...
    if you disable or lower the heuristics recognition level, the alarm will be gone ...

    As "heuristics" by itself declares, it is an "attempt to extrapolate from many code details", whether
    it is a virus ... and the chance for false alarms is rather high, by nature of this approach.

    Just as some hints :-)
This discussion has been closed.