Solved.
Kudos0

False positives.

I have a Windows program I wrote.

When trying to run it from hard disc Norton butts in and says it is high risk.

It was written using Visual Studio on a PC running Norton 360 so definitely not a risk.

So Norton pops up a Window saying there is a problem but with no option to allow the program to run.

So pretty useless.

Its not worth getting it white listed because it changes every day.

Accepted Solution
Kudos0

Re: False positives.

Hi @nigelwright7557,

Could you submit the file which is detected by Norton to us?

You can use the options here - https://support.norton.com/sp/en/us/home/current/solutions/v126152382

Share the Submission ID here in this forum thread once done. We'll take a look at it.

Replies

Kudos0

Re: False positives.

Can you run your work product from a folder and Exclude that folder Xs 2 -
Sorry, don't know if "Items to Exclude from" Xs 2 -> Configure... will help your scenario - 

nigelwright7557:
I have a Windows program I wrote.
When trying to run it from hard disc Norton butts in and says it is high risk.
It was written using Visual Studio on a PC running Norton 360 so definitely not a risk.
So Norton pops up a Window saying there is a problem but with no option to allow the program to run.

Report a suspected incorrect detection to NortonLifeLock
https://support.norton.com/sp/en/us/home/current/solutions/v126152382

Submit a file to NortonLifeLock
https://support.norton.com/sp/en/us/home/current/solutions/kb20090602171902EN

Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832EN


Please tell us what Norton is telling you regarding this event.
For information regarding this event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste here.


jatclat:
Data Protector blocked a suspicious action by VsSyncBack.exe.
This program is something I created myself with Microsoft Visual Studio. It’s over a year since I used it. This error message has started appearing. Can you explain how to tell it that the program is safe?

https://community.norton.com/en/forums/data-protector-blocked-suspicious-action 

Kudos0

Re: False positives.

The problem is I sell the software to other people so allowing a folder on my pc doesnt help.

By the time one person has received the software it has been updated so is different to previous version.

Norton used to have the option to trust software.

It still does but still blocks the software on my pc.

Kudos0

Re: False positives.

nigelwright7557:

The problem is I sell the software to other people so allowing a folder on my pc doesnt help.
By the time one person has received the software it has been updated so is different to previous version.
Norton used to have the option to trust software.
It still does but still blocks the software on my pc.

Oh...other people see the Norton block...too. 
Since, I have no way to reproduce Norton block, my side.  
Since, you have not posted any Security History -> Norton block event details. 

Curious, what Norton engine/s is throwing the block? 
Auto-Protect, Data Protector or _________? 

Sorry, I've no way to reproduce Norton block event, my side.  

Maybe, your work product is not signed along with frequent updates? 

We'll try to call attention to this topic.  No promises.  No timeline. 

FWIW ~ when I've had ...for example: Unproven ...safe files. 
Norton takes a few days to clear after I've invoked Trust Now and submitted files to Norton. 
I've had to turn off Data Protector for Unproven new build installs.  Just me. 

Accepted Solution
Kudos0

Re: False positives.

Hi @nigelwright7557,

Could you submit the file which is detected by Norton to us?

You can use the options here - https://support.norton.com/sp/en/us/home/current/solutions/v126152382

Share the Submission ID here in this forum thread once done. We'll take a look at it.

Kudos0

Re: False positives.

I had forgot to sign the programs.

I have done that now.

This thread is closed from further comment. Please visit the forum to start a new thread.