• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Found something weird after full system scan.

I found it in my history after full system scan it says exonerated, but isn't that name the name of a virus? I don't know what I should do.

Category: Norton Community Watch
Date & Time,Risk,Activity,Status,Recommended Action,Date Updated,Submitted By,Description,Submission Details
2/16/2017 3:02:47 PM,Info,Statistical Submission: Heur.AdvML.C Exonerated,Submitted,No Action Required,2/16/2017 4:31:25 PM,Norton Security,Statistical Submission: Heur.AdvML.C Exonerated,"_________  <br>Detection Digest:  <br>03 00 EA AF 0F 01 00 03 00 00 00 00 00 00 00 00 ................  <br>00 00 00 00 00 00 00 00 00 00 00 00 00 04 03 00 ................  <br>00 00 00 03 06 00 01 02 04 14 00 00 06 4D 00 08 .............M..  <br>01 12 04 00 00 00 00 1A 04 00 00 00 00 22 08 00 .............\"..  <br>00 00 00 00 00 00 00 2A 08 00 00 00 00 00 00 00 .......*........  <br>00 32 27 06 18 18 6E 09 AF 43 24 15 63 9B 1C 21 .2'...n..C$.c..!  <br>30 36 A5 0D 12 01 A5 85 D9 5D C9 47 D5 BA 4B 39 06.......].G..K9  <br>81 72 4D 7C 62 68 1A FE FF FF 3A 00             .rM|bh....:.      <br>  <br>OS-Country:1  <br>OS-Language:English  <br>Processor:AMD64 Family 21 Model 2 Stepping 0  <br>System:Windows 10 Home build 14393   <br>Platform-GUID:9D6A5753-F0B2-4D1C-8C05-D06349C5EA1D  <br>DateSubmitted:Thu, 16 Feb 2017 22:31:24 GMT  <br>Product:Norton Security 22.9.0.68"

Replies

Kudos1 Stats

Re: Found something weird after full system scan.

Hello

Exonerated means that it was proven your computer did not have that particular malware. There is nothing for you to do or worry about. This is for statistics that Community Watch does. It is perfectly normal for you to see these things if you look in the History Logs.

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.11.0.41 I E 11
Accepted Solution
Kudos2 Stats

Re: Found something weird after full system scan.

Norton Community Watch is not a malware detection component.  It sends files of interest to Symantec for analysis.  A statistical submission is generally something that is used to refine virus definitions to make them more accurate and less prone to false positives.  So if a statistical submission says that a file is Heur.AdvML.C exonerated, it means the file is not Heur.AdvML.C.  The file will be submitted to Symantec though, and if necessary, the virus definition for that malware may be tweaked to make it more precise and less likely to cause possible false positives with that file in the future.  If the file had actually been Heur.AdvML.C, Norton would have removed it.

Kudos0

Re: Found something weird after full system scan.

Hello, I have the same problem.

Yesterday after full scan I noticed Heur.AdvML.C in my scan history with "exonerated" status. I found some informations about it and people call it a "trojan" virus. But what makes me curious, I formatted a whole pc and ran scan again. With many files like drivers (exonerated too) I found Heur.AdvML.C again. And that's why I'm worried a little bit and I hope it's not something dangerous

I'm sorry for mistakes because English is not my mother tongue.

Kudos1 Stats

Re: Found something weird after full system scan.

Hello AxelFrost

To stop these files from showing up as false positives, you need to submit the files so that they can be analyzed some more. Then they can stop being removed as being bad files. Next time you download those files, nothing will show up as being bad files that were exonerated. If you have the files, then send them in.

To report a false positive, please use this link

https://submit.symantec.com/false_positive/

Please see this KB

https://support.norton.com/sp/en/us/threat-removal-solutions/current/solutions/kb20100222230832EN_EndUserProfile_en_us

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.11.0.41 I E 11
Kudos1 Stats

Re: Found something weird after full system scan.

floplot:

Hello AxelFrost

To stop these files from showing up as false positives, you need to submit the files so that they can be analyzed some more. Then they can stop being removed as being bad files. Next time you download those files, nothing will show up as being bad files that were exonerated. If you have the files, then send them in.

AxelFrost wrote " Yesterday after full scan I noticed Heur.AdvML.C in my scan history with 'exonerated' status."  If it said "exonerated," that is a Norton Community Watch submission entry in history, not a scan detection of malware.  See my post above explaining these entries.  From what AxelFrost posted, it doesn't look like anything was downloaded or removed, and therefore, there were no false positives.  It sounds like AxelFrost was seeing exactly the same benign entries as the OP, in which case Norton Community Watch is already sending the files to Symantec as statistical submissions - so no need for the user to take any action at all.

Kudos0

Re: Found something weird after full system scan.

Hello SOJ

AxelFrost formatted his computer and then found the same drivers again getting the designation. I know all about NCW and exonerated files. If the same files keep getting exonerated, then Symantec isn't tweaking their definitions so that these drivers still come up as exonerated malware names. We don't know if he used an image after formatting or if he downloaded everything and ended up with the same NCW designations.

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.11.0.41 I E 11
Kudos0

Re: Found something weird after full system scan.

floplot:

Hello SOJ

AxelFrost formatted his computer and then found the same drivers again getting the designation. I know all about NCW and exonerated files. If the same files keep getting exonerated, then Symantec isn't tweaking their definitions so that these drivers still come up as exonerated malware names.

I do not believe that statistical submissions result in instant revisions to virus definitions.  And until the definition is eventually refined, these files will continue to be submitted.  Reformatting, I expect, would definitely cause Norton to treat the files as new again.  It is not a problem.  These are benign files that Norton just wants to compare to other files in its database.  There is no malware here and no false positives, so it makes no difference why, or how many times, these files get submitted.

Kudos0

Re: Found something weird after full system scan.

Thanks for fast answer

As I said before I formatted a whole pc so windows 7 aswell. Drivers first and norton, nothing else. I updated my norton and rebooted my pc a few times. First NCW submission "amdhdl32.dll exonerated" (so drivers probably) and second "Heur.AdvML.C exonerated".I never visit any suspicious website and download suspicous files before format. But I heard that sometimes format is not enough and can't remove all malwares. I'm worried because I never seen any Heur.AdvML.C NCW submission

This thread is closed from further comment. Please visit the forum to start a new thread.