Norton Internet Security / Norton AntiVirus

[ohayogayle]

Hi.  I hope this is the right place to ask this.  Umonit with a little icon has opened on my taskbar, and rightclick does not remove it, and rebooting brings it back, too.   When i search in 'files&folders' on my pc, it appears to be a file in C:\WINDOWS\prefetch as UMONIT.EXE-07102CB9.pf  and as UMONIT  in C:\WINDOWS\system32.   When i google to see what it is, i see that some websites consider it a trojan horse and offer ways to remove it.  Why doesn't Norton Internet Security pick this up in my regular scans?  Should I remove this or ignore it?    Thanks for any wise advice. 

[floplot Norton Fighter]

Hello ohayogayte

Welcome to the Norton Community Forum

You can submit the file for further analysis by following these instructions.

Please use this link if you think that a file is a false positive:
https://submit.symantec.com/dispute/

If there is a possibility that the file might be infected, please submit it to Symantec using this link:


https://submit.symantec.com/websubmit/retail.cgi



Another alternative which is fast you can use Threat Expert:

http://www.threatexpert.com/submit.aspx

(Thanks to Yaso for providing the links)

Please submit the files to threatexpert and to Symantec and please let us know the results Thanks

Happy New Year !

[delphinium Norton Fighter]

Have you used a Sandisk USB drive lately.  There is a legitimate Umonitor that monitors when a USB drive is plugged in.  The System32 folder is the correct place for the legit application.

Removal instructions are here:

http://www.bleepingcomputer.com/startups/umonit.exe-5928.html

[ohayogayle]

Hi, thanks for reply.  I leave my printer and scanner plugged into USB ports quite often.  maybe that's it, though i don't know why the umonit is on taskbar now and not all the time.  anyway, good to know it's in the right place and is legit. 

[floplot Norton Fighter]

Hello ohayogayle

Please read over delphineum's post again and check out the link that was posted.  Please make sure that it is the legitimate file.. You can follow the instructions I gave also to make sure. Thanks

Happy New Year !