• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Insight just removed the most important file on my computer

I have a .exe file that I keep on a thumb drive.  It is a self encrypting file where I keep all of my passwords, account information, etc.  I have told insight over and over and over again NOT to mess with it.  At least it used to ask me.  Today it did not ask me, it just removed it.  The reason it was removed appears to be that Norton doesn't know anything about it.  Well duh!  Of course not.  So if I were a programmer and I compiled code every day, would my new files be removed every night?  Sheesh!  This is bad behaviour. 

Fortunately I keep backups.  Of course I'm worried that they could also disappear, so maybe I'll start renaming them with some other file type.  But what I really want to know is how can I prevent Insight from removing this file?  Or do I just need to turn it off and not use it at all?

Thanks.

Replies

Kudos1 Stats

Re: Insight just removed the most important file on my computer

So you keep personal info on a USB stick that can be easily lost or stolen? Huge mistake. A USB stick should also be immunized so it is better protected against viruses. Panda USB Vaccine can do this free.

http://www.pandasecurity.com/usa/homeusers/downloads/usbvaccine/

You need to exclude the files from Sonar and Insight by going into settings/ antivirus. You can also add exclusions into settings/ Administrator. Please read the Norton PDF manual I linked you to. It will explain how to exclude what you need. 

https://community.norton.com/en/comment/7297001#comment-7297001

ftp://ftp.symantec.com/public/english_us_canada/products/norton_security...

Norton has a password manager built in. You can use that. I myself use LastPass which is a free browser addon. 

Accepted Solution
Kudos3 Stats

Re: Insight just removed the most important file on my computer

Move the file to a special folder of its own and exclude the folder and its contents from Norton Auto-protect and all scans in Norton Antivirus Settings.

Kudos0

Re: Insight just removed the most important file on my computer

I knew someone would chastize me for something they did not understand.  My USB stick is not so easily stolen and if it is, the file is protected by 256 bit encryption.  Yes, that can be broken if you want to badly enough, but the name and the fact that it is a .exe file will not suggest to anyone that they might want to do so or even that there is any data inside of it to crack.

One reason I do it this way is that I can keep control of my data "forever".  You might be young, I am old.  I've seen so many changes in the digital world it would make your head spin.  I don't want to protect something with some "Panda" software and then have that company go out of business or get bought or decide to no longer support whatever OS I'm using at the time and suddenly my data is inaccessible.  With my self encrypting file I can open it with any Windows PC.  If, someday, Windows stops supporting .exe files (how likely is that) I can still open it with an older PC and copy the data into something else at that time.

I do not wish to use the Norton password manager for the same reason and also because I've got a whole lot of other data in there besides just passwords. 

I have tried excluding the file from Sonar and Insight, but every time I update it, those programs see it as a new file or as a mysteriously changed file and try to attack it again.  They used to notify me and ask what to do and I'd say to ignore it, but today they just took it into their own hands to delete it entirely.

Kudos0

Re: Insight just removed the most important file on my computer

" Move the file to a special folder of its own and exclude the folder and its contents from Norton Auto-protect and all scans in Norton Antivirus Settings. "

I like this and will try it.  I haven't done it before.  Any hint on where I'll find the place to make the exclusion?

Thanks.

Kudos0

Re: Insight just removed the most important file on my computer

Have you ever heard of immunizing a USB stick? It is the first thing every USB stick should get. 

For years, Autorun-based malware has been atop of the worldwide e-threat landscape, with notorious representatives such as Trojan.AutorunInf, the Conficker worm (Win32.Worm.Downadup) or Worm.Autorun.VHD.

Introduced back in the Windows XP era to facilitate software installations from CD-ROM media for non-technical computer users, the Autorun feature has rapidly become the infection vector of choice for cyber-criminals.

The USB immunizer is Bitdefender's response to this growing issue.

It disables autorun-related threats before they access the computer. Once installed, it constantly watches for newly inserted USB storage devices and immunizes them on the fly. If you accidentally plug in an infected USB drive that has not been immunized, the computer will not auto-execute the piece of malware located on the USB storage device.

https://labs.bitdefender.com/projects/usb-immunizer/overview/

Even with 256 bit encryption your files can be stolen by some hacker. If these are self made programs you cannot expect any antivirus to not detect it. Also even if Norton excludes it as soon as you change it Norton will notice the behavior and set an alert. I have been using LastPass for my passwords and Google Drive for my files and documents. Been doing this for 10 years now. No issues. 

Fatbear please read the Norton PDF manual. It will explain how to exclude everything. I also sent you a link to a forum post to exclude files. 

Kudos0

Re: Insight just removed the most important file on my computer

My USB sticks are data only.  They were reformatted without the U3 stuff years ago.  So long ago I don't actually remember how I did it.

I'll take a look at the link you sent.  Sorry I missed it on the first read.  Meanwhile, I do think I found where it is in the settings, I have put the file in its own folder, excluded that folder, changed my task scheduler settings and my backup program to take the file from that folder.  I also re-wrote my backup script to put a different suffix on the filename so it (hopefully) won't be treated as an executable file.  I can always change that back if I need to use a backup.  (Like I did today.) 

So everything should be setup for the time being.

Thanks for your help.

Kudos1 Stats

Re: Insight just removed the most important file on my computer

Hello

It's in Settings>Antivirus>Scans and Risks

Thanks.

The product manual is included in your Norton program. It's under Help on the main page of your program.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Insight just removed the most important file on my computer

@FatBear:

To exclude the folder that contains your personal data, plz do the following:

1. temporarily disable your internet connection by referring to to the below imgs:

Locate the networks you're using, then hit the Disable tab and, follow the on-screen info.

(Re-enable your internet connection when you exclude the said exe file or other target folder/fisk/alike.)

2. Turn off Norton Auto-protect & Smart firewall - remember to re-enable those 2 settings later. BTW, this action requires the admin access.

3. Now, follow flo's comment to exclude your file(s) from Norton virus scan. 

Go back to Step 2 then 1 to restore Norton protection and your internet connection.

thx... :)

PUP Hunter PRO: Just TRYING to save the world (U) from cyber threats, A single blog post, at a time, and ONCE & FOR ALL. (A fan of Nadia_Kovacs)
Kudos0

Re: Insight just removed the most important file on my computer

I actually found and made those exclusions yesterday after the first suggestion.  But I did not go through all of the disabling and re-enabling laid out in that last posting.  What is it for?

Thanks.

Kudos0

Re: Insight just removed the most important file on my computer

20750065's can be very extreme and hard to follow with all the screenshots and arrows. He was merely suggesting to disable the internet so nothing would go outbound or inbound. Plus so Norton could not connect to the cloud to check files. Disabling Norton was so you can easily add the exclusions without Norton interfering. I try to simplify things. That is why I sent you the Norton Security manual online. 

Kudos0

Re: Insight just removed the most important file on my computer

Hello PSB

You do know that the user manual is right in the product under Help?

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Insight just removed the most important file on my computer

I did but obviously FatBear did not so I linked him.
Kudos0

Re: Insight just removed the most important file on my computer

@FatBear:

the above steps can guarantee you maximum safety while excluding your exe. One more thing, your Norton may re-quarantine that file quickly until you complete the exclusion process.

Thx 

PUP Hunter PRO: Just TRYING to save the world (U) from cyber threats, A single blog post, at a time, and ONCE & FOR ALL. (A fan of Nadia_Kovacs)
Kudos0

Re: Insight just removed the most important file on my computer

I did not find the screenshots and arrows difficult to follow.  But I had already done the exclusion before that was posted.  The file is still there, so I guess I lucked out by doing the simple approach.  I also changed my backup script to save those backups with a bogus file extension so they will not be identified as executable.  At least not superficially.  I can rename them if I need to use them.  I also excluded the backup directory (directory is only used to backup this file) just in case the file headers can still identify them as executable. 

Thanks to everyone for the help.

Kudos0

Re: Insight just removed the most important file on my computer

I also changed my backup script to save those backups with a bogus file extension so they will not be identified as executable. 

My suggestion would have been to not make it a self-extracting archive. As you found it's the file being an executable that is causing the problem.  Renaming the extension might not be a long term solution because you don't know for sure that renaming it back to .exe and then running the extraction will work without triggering another false positive detection.

I know it's nice to have "self contained" archives that can be used on any system without needing third party software, (I used to use them myself).  But now I prefer just making non-self extracting archives.  When you encrypt the contents an AV can't scan the contents and not being an executable keeps them from triggering false positives.

Dave  

Kudos0

Re: Insight just removed the most important file on my computer

As long as I rename it within a protected directory, I wouldn't expect Norton to delete it.  Not until they change how they do things again.  (Very likely - most software is written and maintained by young people with no long-term view of the world.)

My archive probably dates back to before some viewers of this thread were born, though it has been updated to modern 256 bit encryption much more recently.  Maybe there is a better way now, but will it still work in another ten years?  Perhaps, but unlikely.  Will mine even still work in ten years?  Maybe not on the current tech at that time, but I can always find a way to run a .exe file.

Kudos0

Re: Insight just removed the most important file on my computer

Honestly speak keeping personal info even if it is encrypted on a portable USB stick is not a good practice. Kind of like keeping your passwords on a notepad in your top desk drawer. The cloud is where things are. USB stick can be attacked by malware. Which is why I mentioned to you about immunizing it. Norton Identity is part of your subscription. I myself use LastPass and it is the most secure password storage on the market. Just research it. And its FREE. 

This thread is closed from further comment. Please visit the forum to start a new thread.