• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Stop Norton deleting a file

Right now, Norton IS 2014, automatically delete any suspicious file. A few times it incorrectly deleted files : no spyware or something. Also stuff I want to decide on first.

Is there a way to avoid this?
Maybe suspicious files can be renamed (like FileXYZ.exe -> FileXYZ.ex_)

And create a log file of those renames?

I don't know.

Thanks

=

Replies

Kudos0

Re: Stop Norton deleting a file

Right now, Norton IS 2014, automatically delete any suspicious file. A few times it incorrectly deleted files : no spyware or something. Also stuff I want to decide on first.

Is there a way to avoid this?
Maybe suspicious files can be renamed (like FileXYZ.exe -> FileXYZ.ex_)

And create a log file of those renames?

I don't know.

Thanks

=

Kudos0

Re: Stop Norton deleting a file


thewul wrote:

Right now, Norton IS 2014, automatically delete any suspicious file. A few times it incorrectly deleted files : no spyware or something. Also stuff I want to decide on first.

Is there a way to avoid this?
Maybe suspicious files can be renamed (like FileXYZ.exe -> FileXYZ.ex_)

And create a log file of those renames?

I don't know.

Thanks

=


Hi,

The whole object of having a Norton security product on your system is to keep dangerous files off of it. If you feel that a file is not a hazard to your system, or anybody elses submit it here

http://www.symantec.com/business/security_response/submitsamples.jsp
or
https://submit.symantec.com/antifraud/phish.cgi

and the team will evaluate it. If it isn't an infection then they will update the Norton products to allow the file to be downloaded and installed.

Keep us posted

Dick Win 10x64 current current NSBU
Kudos0

Re: Stop Norton deleting a file

Thanks for the feedback (and sorry for the delay).

The thing is that the .exe actually is nót a real 'executable', i.e. it is not a program, but rather an  important(!) .txt  document that has been zipped to a password protected selfextracting executable.

Luckely I always keep a number of backups.

If I hadn't, I would have been in deep...

Anyway, the weird thing is that  I cannot reproduce it - whilst keeping backups on safe place, I tried to run the same .exe, moved it around whatever, and all went fine, no interference of Norton.

=

Kudos0

Re: Stop Norton deleting a file

In Settings/Computer in the UI, the first three categories give you some options to ASK ME, so you can monitor files and programs that you may wish to skip or whitelist.

Windows 10 Home X 64
Kudos0

Re: Stop Norton deleting a file

Thanks. I believe my settings are like that.

=

=

this is what happened

=

=

As said, I cannot reproduce it anymore.

Also, this specific entry, I have looked into all history (recent, full, scan results, resolved security risks, unresolved security risks, quarantine, sonar, intrusion prevention, download insight, etc.  but this entry isn't there anymore. Peculiar.

Anyway ...

=

Kudos0

Re: Stop Norton deleting a file

Maybe because as the file was removed, the history entry got removed as well ? I'm guessing there.....

Windows 10 Home X 64
Kudos0

Re: Stop Norton deleting a file

Hello

The entry may not be there any more because the file might have been whitelisted or something about the file is now allowing it. I believe whan a file is removed, it is also anaylzed by Norton and subsequently found to be safe. It is removed until some point when it can be determined to be safe.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.
Kudos1 Stats

Re: Stop Norton deleting a file

Hi thewul

You should be another journal entry

You can restore the file from quarantine and exclude from further inspection

Recommend to perform these actions only if you are completely sure that the file is safe

Kudos0

Re: Stop Norton deleting a file

It must have been the self-extracting part that Norton did not like.  It could not have been the contents because it can't scan inside a password protected archive.

I suggest you keep a copy without the self-extractor.  Make it a common format like zip and you don't need it to self extract.

Or use a more common compression program like winrar, winzip, or 7-zip, I have never had a problem with those self extracting files.

Dave

Kudos0

Re: Stop Norton deleting a file

Found some entries in the log file.

Something with Status: "Pending"   whatever..

=

Kudos1 Stats

Re: Stop Norton deleting a file


thewul wrote:

Found some entries in the log file. 

Something with Status: "Pending"   whatever..

 ...................................................


Hi thewul,

                   This definition may help you:

The Statistical Submissions  ( I think its also applicable for sample submission) are submissions to Norton Community Watch - they are not detected threats.  Statistical submissions enable Symantec to evaluate its virus detection definitions against files found on users' computers that have similarities with the signatures but are not malicious.  By doing this, the definitions can be fine-tuned to increase their effectiveness and decrease the chances of false positives.  What you are seeing in the Norton Community Watch logs are simply files of interest - samples being submitted for study.  Behavior-based detections are prone to false positives, so it is important to evaluate files in the wild that could be mistaken for Trojans and other types of threats using these methods of detection. 

You should not do anything with these files on your computer because they are a) not threats, and b) could be important files needed for your system or programs to run properly.  Norton has all sorts of components that detect and remove suspicious files, as well as known malware, but Community Watch is not one of those components.  Please trust the protection features to do their work properly, and do not make changes to your system based on samples that Norton is submitting for analysis.

Quoted from reply of SendOfJive in this thread (partially edited). Thanks to SOJ

This pending action / status occurs usually after a scan or threat detection and becomes successful next time you connect to internet for sufficient time for file upload. This help Norton to keep track of file or process usage, its effect on system, improve insight suggestions, scanning efficiency and detection rate. It will also help Norton to find different variations / forms of the threat detected( which indeed helps to improve detection rate.)

regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!
Kudos0

Re: Stop Norton deleting a file

Ah! 

Many thanks indeed for the elaborate reply. All clear.

Again thanks.

Also to all other contributers of course!

=

Kudos0

Re: Stop Norton deleting a file

Happy to hear you have cleared it out.
regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!

This thread is closed from further comment. Please visit the forum to start a new thread.