• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Constant SONAR warnings

Why do I keep getting these SONAR warnings regardless of what web-site I'm on? See attached picture.

File Attachment: 
Labels: SONAR

Replies

Kudos0

Re: Constant SONAR warnings

If you think Norton made a mistaken detection, you may submit dispute at https://submit.symantec.com/false_positive/.

Please tell us what Norton is telling you regarding this event.

For information regarding this event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste here.

https://www.symantec.com/security-center/writeup/2018-091102-4433-99

Kudos0

Re: Constant SONAR warnings

Filename: wscript.exe
Threat name: SONAR.Cesaletat!gen1Full Path: c:\windows\system32\wscript.exe

____________________________

____________________________


On computers as of
4/11/2018 at 7:34:34 PM

Last Used
9/15/2018 at 9:28:01 AM

Startup Item
No

Launched
Yes

SONAR Protection monitors for suspicious program activity on your computer.


____________________________


wscript.exe Threat name: SONAR.Cesaletat!gen1
Locate


Many Users
Hundreds of thousands of users in the Norton Community have used this file.

Mature
This file was released 7 months ago.

High
This file risk is high.


____________________________


Source: External Media


____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available
 

Kudos0

Re: Constant SONAR warnings

For second opinion choose File &or Search hash at VirusTotal.

Kudos0

Re: Constant SONAR warnings

Kudos0

Re: Constant SONAR warnings

Hello gg. Windows Script host file can become infected, and also doesn't have a digital signature from Microsoft. As bjm suggested a false/positive submission may be in order, Symantec follows the file submission suggestion here as well. Normally this detection is browser based javascript, not to be confused with JAVA itself as they are separate entities. Clearing your browser(s) cache and running a full system scan with your Norton product is a first step.

Running file insight on my production computer results in the screenshot below. First suggestion is to run Rkill to check for malware processes, registry entries for malware and have it terminate them. Follow-up with a standard scan with Malwarebytes and see what if anything it detects.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.503 / N360 Deluxe 22.17.1.50 / Norton Core v.282 on Android 1.98
Kudos0

Re: Constant SONAR warnings

Hi @ggrotyohann,

Thanks for reporting in Norton Community Forums. Can you please submit the files for further analysis? Once files submitted please share the submission tracking number for follow up. 

Report a Suspected Erroneous Detection (False Positive) to Symantec

Sunil_GA | Norton Forums Administrator | Symantec Corporation
Accepted Solution
Kudos1 Stats

Re: Constant SONAR warnings

I uninstalled Norton Security, installed Malwarebytes and ran a scan. It removed a few things and then reinstalled Norton. No more warnings now.

Kudos0

Re: Constant SONAR warnings

Good news gg. If your issue has been resolved please mark the appropriate post that is the solution. Others may then see the solution in the event that they are having a like or similar issue. Glad we could assist.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.503 / N360 Deluxe 22.17.1.50 / Norton Core v.282 on Android 1.98

This thread is closed from further comment. Please visit the forum to start a new thread.