Norton Internet Security / Norton AntiVirus

[Marty]

I've had ComboFix on my PC since May 24th (2009), downloaded directly from BleepingComputer.  Have never run it; had it sitting there just in case.  Today's (5/30) Antiphishing definition updates (20090530.005) were auto downloaded at 12:51:34 PM and ComboFix was removed by Auto-Protect at 12:55:44 PM, branded a Trojan and quarantined!

Anyone else have this occur on their PC today?  Hmm, will Malwarebytes and SuperAntiSpyware be the next to be zapped? 

[Stu]

Probably just bahaviour. Try to exclude it from scanning

[dbrisendine Norton Fighter · Accepted solution]

Actually, it is recommended that you always download a fresh copy of ComboFix when you need it (or at least, store it off your main system) .  It can be infected and made inoperable by malware.  Also, the use of ComboFix is not recommended with any active AV products at all as the will, repeat will, interfere with the proper function of ComboFix.

[pexley]

I agree with db. Since combofix does more than simply act as a manually initiated scan to supplement norton it is likely conflicting with norton's real-time protection.

[Marty]

Thanks for the input.  I stll find NIS's behavior in this case rather odd, but no big deal.  A full scan was clean.  I'll download a fresh copy of ComboFix if I ever need it ... hopefully never!