• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Legitimate Program File Removed

When I ran the update function for iObit Uninstaller 8, Norton Security blocked the file from running and deleted almost all of the Uninstaller files and folders, not just the Autoupdate.exe one.

I thought I remembered that in earlier versions (NIS?), there was a way to list files that should be protected from such automatic activity.

But I can find no such option in Norton Security.

There should also be an option to tell NS to notify the user before taking such drastic action, and allow the user to say that the file is O.K.

I've used some version of Norton for years, going back to the original Norton Utilities. But if not fixed, this is a deal breaker.

Windows 7 Pro 64-bit

Norton Security checked for latest updates

Replies

Kudos0

Re: Legitimate Program File Removed

Please review:
https://community.norton.com/en/forums/false-positive-26


Report a Suspected Erroneous Detection (False Positive)
https://submit.symantec.com/false_positive/


Please tell us what Norton is telling you regarding this event.
For information regarding event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste.

For second opinion choose File &or Search hash at VirusTotal


Please review:
1) Restore an item from Quarantine
https://support.norton.com/sp/en/us/home/current/solutions/v6200368

2) My Norton product alerts that the file I downloaded is not safe, and deletes it
https://support.norton.com/sp/en/us/home/current/solutions/v80629965

3) My Norton product incorrectly alerts that a file is infected, or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832

4) Add items to the Signature Exclusions
https://support.norton.com/sp/en/us/home/current/solutions/v54298598

5) Turn off or turn on Download Intelligence
https://support.norton.com/sp/en/us/norton-security/current/solutions/v23920640

6) My Norton product detects a file or program as a threat even after I exclude it from scan
https://support.norton.com/sp/en/us/home/current/solutions/v115455517


Restore & exclude this file: is not the same as adding item(s) to Exclude from Auto-Protect nor the same as Exclude from All Detections.


Exclusions / Low Risks options lets you exclude disks, folders, and files from risk and Auto-Protect scans.  It provides a way for you to manage the items that have a low-security risk. 
Excluding low-risk items from scans reduces your protection and should be used only if you have a specific need.
https://support.norton.com/sp/en/us/norton-security-with-backup/22.11.0.41/solutions/v15457075

Kudos0

Re: Legitimate Program File Removed

Category: Norton Community Watch
Date & Time,Risk,Activity,Status,Recommended Action,Date Updated,Submitted By,Description,Submission Details
12/6/2018 11:39:35 AM,Info,IPS Detection Statistical Submission,Submitted,No Action Required,12/6/2018 11:39:36 AM,Norton Security,IPS Detection Statistical Submission,"Signature ID: 23318  <br>Local or Remote Attacker: 2  <br>Remote Port: 80  <br>Local Port: 49906  <br>Protocol: 6  <br>Signature Set Version: 20181205.061  <br>Application Name: \DEVICE\HARDDISKVOLUME5\PROGRAM FILES (X86)\IOBIT\IOBIT UNINSTALLER\AUTOUPDATE.EXE  <br>Offending URL: update.iobit.com/infofiles/iu8/Patch/IU820_20181206.exe  <br>Date Detected: Thu, 06d Dec 2018d 18d:39d:34d GMT  <br>Application File Checksum: 4E5C4A0A2B799CFD187EBAE14925E4BB  <br>Application File Information: 8.0.2.430  <br>Network Data: 434D50520014000078DAED91CD4AC3401485EFD822DA6A11A55577EEAC0B9BFE68C93624A309DA244E26A27531C41831504DB111C417F1157C149F4A1C87F843AB5B57F70BC3659833E7DE39712DD3589823500180120021B2CEC9F5516B72352E009EB7E48E685096FB32AC0067861B1C50264C3B748FA8051F907D98976555DE326DE7D81207CE31758D017542BDDB16DD7647EF74DBFD56F2980069165ECBE004C267DED9B908834FA32565B4223F464F421A70615B4CD85EC01FC657519EB4D2EC32CD5B71760BC42E8C1A335A617AA1CB8972EC16AAFAACCAF718F795A857B45DFB1651C3A27F75AE2B791536A7E5F2214C1887D4E583EC291D8D226DAFD506522D66A87DE90794DB9E5556CD4BCA6D5BFA7D9E86CCD1D2BBEBEC3A1D25132D7DD0353FCAE31BEDB7382B5F71321AF89E1B50F97A8BBE2AEB85E270FDE7A1CBE57C42FEA0436EBF0CDFA46C514DB0A1329A92F1739F46E3F1288DA33CCDEEB42CCE937C7792DF27910C62ADC8ADF17DB1484206714A19358D38DE6A4EA248D37BFDFECE6008088220088220088220088220C8BFF10EAB40852D  <br>Sub-signature ID: 73879  <br>Signature Properties: 29712  <br>Referer URL:   <br>Application File SHA256: E04E49F6521946DDD82FB2573ECFBD2D1FCCB2904A1DFC884A361E3855692A68  <br>Application File CreateTime: 0  <br>IPSSubmissionID: 088b94f8-8d93-11e8-87c2-0024e82df038  <br>Application File Reputation: 63  <br>Application File Prevalence: 139  <br>Signature Response: 2  <br>Remote Address: 72.21.81.253  <br>Message Disposition: 1  <br>  <br>OS-Country:1  <br>OS-Language:English  <br>Processor:Intel64 Family 6 Model 26 Stepping 5  <br>System:Windows 7 build 7601 Service Pack 1  <br>Platform-GUID:4BC50047-E6E7-4982-B787-352E433076CF  <br>Telem-ID:9530C856-9E5D-4D00-9AE2-58E4175863BF  <br>HWID:D9A7A250-1469-5FBF-B61B-E8B9EFCE22DF  <br>Hostname-MD5:3F7B4E2979C73EFE60B2E4D5C44EC219  <br>DateSubmitted:Thu, 06 Dec 2018 18:39:35 GMT  <br>Product:Norton Security 22.16.2.22"

Kudos0

Re: Legitimate Program File Removed

When I ran the update function for iObit Uninstaller 8, Norton Security blocked the file from running and deleted almost all of the Uninstaller files and folders, not just the Autoupdate.exe one.
I thought I remembered that in earlier versions (NIS?), there was a way to list files that should be protected from such automatic activity.
But I can find no such option in Norton Security.

Look in Resolved/Unresolved Security Risks regarding this event.

Please tell us what Norton is telling you regarding this event. 
For information regarding event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste.

Exclusions / Low Risks options lets you exclude disks, folders, and files from risk and Auto-Protect scans.  It provides a way for you to manage the items that have a low-security risk. 
Excluding low-risk items from scans reduces your protection and should be used only if you have a specific need.
https://support.norton.com/sp/en/us/norton-security-with-backup/22.11.0.41/solutions/v15457075

Kudos0

Re: Legitimate Program File Removed