Norton Internet Security / Norton AntiVirus

[Ofsted]

Norton 2010 recently downloaded and installed as answer to a previous problem persistently identifies TweakXP as a threat but cannot remove it and therefore goes round in endless circle.  How can I tell it to ignore?

Attached  conversation with Norton expert.

David

Weston UK 

<<Edit: Norton Support Agent"s name removed from the attachment as the the participation guidelines>>

Message Edited by JerryM on 12-15-2009 05:21 AM

[Wikipedian]

Yes there is a way

Disclaimer: This User DOES NOT hold responsibility for damage to the user's computer resulting from excluding any threats that are identified as malicious.  Please only do so if you are 100% sure the file is SAFE!

1. Open up nis 2010


2. Go to settings


3. Scan exclusions.

4. Click add under scan exclusions

5.browse your file/folder/drive and click add

6. do similarly for auto protect exclusions


and you are done




now the threat will NOT be scanned by nis 2010

False positive?

Try submitting the sample to symantec: https://submit.symantec.com/dispute/false_positive/

In addition, try running the file through a couple of other AntiVirus engines provided by other manufacturer:

• http://www.virustotal.com/
• http://virusscan.jotti.org/en
• http://www.kaspersky.com/scanforvirus
• http://www.garyshood.com/virus/

And click here to submit the file as sample to symantec.

Message Edited by Wikipedian on 12-15-2009 01:46 PM

[Ofsted]

Many thanks - most helpful

Hope it goes away.

David

(Why couldn't the Agent suggest that?) 

[Ofsted]

I have done that for two locations - but Norton IS 2010 is still reporting the risk!!!

David

How can I get it to ignore that particular risk?

[Wikipedian]

Try repeating the steps with signature exclusions (the item below scan exclusions)?

[Ofsted]

When I do that it offers me a list of threat signatures but Suspicious.MH690 and 690A are not there.

David 

[Ofsted · Accepted solution]

Had to move the whole implicated folder to a removable drive before a rescan proved negative!!

I love Norton when it works quietly in the background - but I cannot abide these false positives that require days of research to eliminate.