View Full Version : Norton says Winsock32.dll is a TROJAN
bjosh
08-30-2011, 03:39 AM
http://img.photobucket.com/albums/v257/Joshua412/NORTON.jpg
what the fuck? every time i try to extract it, it says its a trojan, so wtf gives?
Secrets
08-30-2011, 08:02 AM
http://img.photobucket.com/albums/v257/Joshua412/NORTON.jpg
what the fuck? every time i try to extract it, it says its a trojan, so wtf gives?
Contact Norton AV and tell them it's not a virus. Add exception to the antivirus for the DLL.
Also, Norton Antivirus sucks.
Secrets
08-30-2011, 08:28 AM
You can submit the false positive information here: https://submit.symantec.com/false_positive/
Submitting a false positive will help us out a lot and takes like 5 minutes to do.
wsock32.dll simply loads the brown skeletons + gypsy fixes into EverQuest through another dll, in a nutshell.
Alkorin
08-30-2011, 08:41 AM
Secrets, I can't find the thread at the moment, but I seem to recall you mentioning somewhere that code was available for the DLLs. Where might we find this? Tried to PM you but you aren't allowing it.
Convict
08-30-2011, 09:52 AM
Ok for some reason I am now also having this problem. I was able to download it with the rest of the files from eqchanges v13 extract and place it in my folder back when it was patched. My norton has been running for over a year. Now I wake up and all the sudden I'm getting the DLL error at character select and when I try to extract it, Norton blocks it. I've tried adding the exception in for it, but it blocks it anyways.
I guess you are right and norton really does blow.
Convict
08-30-2011, 10:05 AM
nvm I figured it out.
Norton was being a bitch and only putting in the exception for the file in my download folder but not in my eq folder.
Extunarian
08-30-2011, 11:13 AM
wsock32.dll simply loads the brown skeletons + gypsy fixes into EverQuest through another dll, in a nutshell.
Be honest - is that all it does? I'm hearing otherwise.
Edit: I'm talking about the eqgame.dll ... not the wsock32
Dantes
08-30-2011, 11:22 AM
I had a tiny progress bar randomly show up the other day said "Updating EverQuest." Is that normal? Does that have something to do with this?
Extunarian
08-30-2011, 11:40 AM
I had a tiny progress bar randomly show up the other day said "Updating EverQuest." Is that normal? Does that have something to do with this?
Did you accidentally run the eqgame.exe without the 'patchme' argument?
Secrets
08-30-2011, 02:50 PM
Be honest - is that all it does? I'm hearing otherwise.
Edit: I'm talking about the eqgame.dll ... not the wsock32
It also has some anti-cheat stuff in it that does not personally identify you, contrary to popular belief. I don't know why everyone has their bottoms in a bunch. (pun intended)
Bohab
08-30-2011, 04:17 PM
We use Symantec Endpoint Protection here (I'm the Sys Admin) and just about 40 min ago this same file was reported as a Trojan on my workstation: wsock32.dll
Lucky for me I'm the guy but for others that play at work, hopefully you rename your EQ directory cause it points your AntiVirus servers RIGHT at your game lol... I.E. the log we get that alerts us of infections shows the workstation's username/computer name & directory of infection in full detail.
As for Symantec being horrible... it works pretty well for us so I guess it's a matter of opinion? We have no problems with it accept it exposing my EQ1 install at work!
AnonSubHuman
08-30-2011, 05:39 PM
Same reports as others using Norton, it identified the file as a Trojan Virus.
Rubin
08-30-2011, 07:06 PM
I'm having this issue also
Rogean
08-30-2011, 07:19 PM
http://www.project1999.org/files/eqchangesv13.zip
redownload that, try it.
The hackers that were banned are reporting false information to get the files flagged.
bjosh
08-30-2011, 09:14 PM
cute
Extunarian
08-30-2011, 09:59 PM
It also has some anti-cheat stuff in it that does not personally identify you, contrary to popular belief. I don't know why everyone has their bottoms in a bunch. (pun intended)
Well whatever it is sending must be linked to an account, which would be linked to my email, which I would consider something that identifies me to a certain extent. I guess I'd just like to know more about what the anti-cheat stuff is logging...
Uthgaard
08-30-2011, 10:01 PM
We can see your account name and number regardless. P99 doesn't have access to your email address. This forum is for bugs. Not tinfoil cats.
Secrets
08-31-2011, 02:37 AM
Well whatever it is sending must be linked to an account, which would be linked to my email, which I would consider something that identifies me to a certain extent. I guess I'd just like to know more about what the anti-cheat stuff is logging...
To register on these forums, you had to have put in your email anyway. Same with the EQEmulator forum, which, surprise, are run by us.
It's logging information that can ban you if you were cheating, not your emails.
Extunarian
08-31-2011, 07:23 AM
nm, i'll take it to pm's.
Mad Jacq
08-31-2011, 09:15 AM
http://www.project1999.org/files/eqchangesv13.zip
redownload that, try it.
The hackers that were banned are reporting false information to get the files flagged.
Thank you. That helped.
I get what they (the hackers) are trying to do. It's just that some of us are so paranoid we wont "trust" any file.
Greg111
08-31-2011, 11:39 AM
sorry had to post... was amazed ppl still used norton anti virus?!?! im surprised it hasnt broke your computer by it self... you should check out bitdefender or AVG both work alot better and use about 200% less resources oh and sorry this was completely not related to the thread... just couldn't resist steering someone away from norton and there horrific programs
Livec
08-31-2011, 06:19 PM
Getting the exact same thing from Avast.
Cannot get it to stop blocking it, actually, or download that update that Rogean posted.
boozehammer
08-31-2011, 11:51 PM
Having this same exact issue. Can't install the dll, using Avast, and can't download that update. Any help?
yes i had this issue you have to go SETTINGS/ANTIVIRUS/SCANS AND RISKS/ scroll down some, "items to exclude from scan" "items to exclude from auto protect SONAR detection"
Configure both of those to specifically allow the win32.dll
boozehammer
09-01-2011, 03:01 AM
for Avast, you would:
1. go to Real-Time Shields tab on the left hand side
2. go to File System Shield
3. go to Expert Settings under Settings
4. go to Exclusions
5. add: "*\wsock32.dll" minus the quotes (not sure which boxes need checking, I left all 3 checked)
6. Enjoy
Bohab
09-01-2011, 11:16 AM
sorry had to post... was amazed ppl still used norton anti virus?!?! im surprised it hasnt broke your computer by it self... you should check out bitdefender or AVG both work alot better and use about 200% less resources oh and sorry this was completely not related to the thread... just couldn't resist steering someone away from norton and there horrific programs
I really don't experience this... its 2011 not 2001... it has improved quite a bit. Between Norton at home and Symantec at work, no problems here. :cool:
Asher
09-01-2011, 11:52 AM
I really don't experience this... its 2011 not 2001... it has improved quite a bit. Between Norton at home and Symantec at work, no problems here. :cool:
2001 is when Norton was actually a functional product. Their AV console sucks, their product eats CPU usage and cripples any computer it gets installed on.
Kaspersky or Avast all the way.
Asher
Bohab
09-01-2011, 12:39 PM
Right, that was the point of mentioning 2001... the old products were hogs. I run NAV 2011 at home and SEP at work. I see no performance drops. /shrug
Run what you like the most, I'm just sharing my current experience with the product...
AnonSubHuman
09-01-2011, 09:30 PM
My biggest problem is that now Norton is telling me that several temporary files are Trojans ever since I installed this new patch. Does the .dll create temporary files as part of its search for hacks?
Eppion
09-01-2011, 09:52 PM
I was zoning into BW when I went LD, and when I came back It said I'm missing client files. Errorcode Dll-1. I try to log in from my laptop and it says the same thing. I try to download the eqchangesv13 file from this forum but it always gets interupted. What the hell is going on. how do I fix this?
Eppion
09-01-2011, 09:59 PM
Btw I tried adding *\wsock32.dll to the exclusion list for the real time file system shield. did nothing.
vBulletin® v3.8.11, Copyright ©2000-2025, vBulletin Solutions Inc.