• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

NAV MAC deleting subcomponent of DropBox application (false-positive)

Note I've already provided this info to @NortonSupport.  Just putting here in case anybody else notices this behavior.

Current NAV Mac v 7.4, and also prior version 12.10.1(7) are now considering the DropBox.app's helper file "LoginHelper" as a virus and deleting it (not quarantining it).

Tried downloading a fresh DropBox installer, and same detection occurred with a fresh installer too.

Replies

Kudos0

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

As of late today, I'm seeing something similar: Norton Security 7.4 running on MacOS 10.12.4 with Dropbox V26.4.24 is reporting that Dropbox.app/Contents/Library/LoginItems/loginhelper.app/Contents/MacOS/loginhelper is infected with OSX.Trojan.Gen

It first reported it in the most-recent Time-Machine backup of the Applications/ folder, but running a manual scan on the /Applications/Dropbox.app also results in the same report.

Kudos0

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

I noticed the same thing on my Macbook when I was running a manual scan. Detected osx.trojan.gen from "LoginHelper". Couldn't repair or delete it. I was figuring out what was wrong. Didn't download anything at all. It happened after I used the LiveUpdate. 

I ran the LiveUpdate the second time and another manual scan to see if it was still there. To my surprise it was gone. Results said no virus detected. I'm still cautious, so I deleted Dropbox just in case.

Do you think it was a false positive and is it safe to use to my Macbook again?

Kudos0

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

Update:

Norton Support notified me on Tuesday (5/16/17) that they had made changes on their end, and this file wouldn't be treated as a virus anymore.

I tested this by running LiveUpdate, then downloading a fresh copy of DropBox installer and installing it.  NAV deleted the file AGAIN.

I notified Norton that this problem is still not fixed.

Kudos0

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

Hi everyone,

Thanks for reporting this issue in Norton forums. This issue has been resolved with latest LiveUpdate. Could you please update Norton with latest definitions and let us know if file still getting flagged by Norton? if yes, please submit the file "loginhelper" to False Positive and share the submission tracking number for further investigation?

Sunil_GA | Norton Forums Administrator | Symantec Corporation
Kudos0

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

Yes, it is still doing it. Where is "False Positive"?

Kudos0

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

submission number: 33273

Kudos1 Stats

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

Checked just now after update -- still doing it

Cmon guys, this is not good

Kudos1 Stats

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

As of May 22 at 13:43 PST, with up-to-date AV definitions it still detected loginhelper as a false positive and deleted it.  So it doesn't seem to be fixed for this combination:  Norton Security 7.4 running on MacOS 10.12.4 with Dropbox V26.4.24

Kudos1 Stats

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

I've filed a second false-positive report with Norton.  (# 33533)

Kudos0

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

Email just in from norton -- they have flagged it and claim to have fixed it

Kudos0

Re: NAV MAC deleting subcomponent of DropBox application (false-positive)

@c_pragman, Thanks for the file submission. I have forwarded the submission ticket to team for further investigation. I will update once we get more details.

@jonhoneyball, Thanks for the update. Could you please let us know if you are still facing issue with latest definitions and fresh download and install Dropbox application?

Sunil_GA | Norton Forums Administrator | Symantec Corporation

This thread is closed from further comment. Please visit the forum to start a new thread.