• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Why are Sonar exclusions removed automatically?

Using Windows 10 (1703) and Norton Security (22.10.0.85).

When installing a new version of a product (olb.exe) it was removed after opening the program by the Norton Security Sonar protection. As the helpfile of the product gave a warning to expect problems with Norton, and I know I can trust the source, I went to the Norton history log and reversed the removal, indicating that I wanted to add it to the exclusion list. This was a month ago.

Today without having made any changes to that program and having used it today, when I left my computer for an hour and opened the program again, it was removed by Norton Sonar protection, and my exclusion list was empty. 

I assume a Norton update was installed in the meantime, but don't know how to check this. Is there a way to stop the exclusion list from being wiped?

Labels: SONAR

Replies

Kudos0

Re: Why are Sonar exclusions removed automatically?

>> How to report false positives


Respectfully, what a user does regarding a Norton detection...is up to the user.

Restore an item from Quarantine
https://support.norton.com/sp/en/us/home/current/solutions/v6200368

My Norton product alerts that the file I downloaded is not safe, and deletes it
https://support.norton.com/sp/en/us/home/current/solutions/v80629965

My Norton product incorrectly alerts that a file is infected, or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832

Add items to the Signature Exclusions
https://support.norton.com/sp/en/us/home/current/solutions/v54298598

Turn off or turn on Download Intelligence
https://support.norton.com/sp/en/us/norton-security/current/solutions/v23920640

Kudos0

Re: Why are Sonar exclusions removed automatically?

I don't wish to sound rude, but this is not really an answer to my question. I know I can restore an item (and did so). I know I can add it to an exclusion list (and did so). My question is why my exclusion list was wiped clean, I assume by a Norton update.

Kudos0

Re: Why are Sonar exclusions removed automatically?

I don't wish to sound rude too.  I cannot see your setup.  I cannot see your added exclusion.   I've not observed user added exclusion removed.  Perhaps, you've found bug.

Perhaps, Chat with Official Norton Support

I went to the Norton history log and reversed the removal, indicating that I wanted to add it to the exclusion list.

"Restore & exclude this file" exclusion is added by Norton...under Norton control.  Norton added exclusions are not added to user added exclusion list.  Did you add (olb.exe) exclusion to Exclude from Auto-Protect + Apply?

Kudos0

Re: Why are Sonar exclusions removed automatically?

Immediately after installation over a month ago I opened the program and after a few seconds it closed and disappeared. I looked at the Norton history log, specifically the option "Resolved security risks" and found it there. I then first went into Norton settings, chose Antivirus and went to the tab Scans and Risks. Near the bottom I chose the option "Risk to Exclude from Auto-Protect, SONAR and Download Intelligence Detection ==> Configure. I chose add folders and chose the appropriate folder where the program is stored.

I then restored the file.

After this I used the program for over a month, opening and closing it at least 50 times. Today, after having used it, I closed it, and left my computer on, but unattended. When I came back I opened the program again and within a few seconds it vanished and I found the error in the history log of Norton. The exclusion list for SONAR was empty.

I have also never experienced this before either. 

Kudos0

Re: Why are Sonar exclusions removed automatically?

Did you add (olb.exe) to Exclude from Auto-Protect + Apply?
olb updated?   olb path changed?

Perhaps, you've found bug.
Perhaps, Chat with Official Norton Support

Lets hear from Community

it was removed by Norton Sonar protection,

do you recall detection info


for more information > from Norton pop-up > More Details > Copy to Clipboard and/or from Norton history > More Options > Copy to Clipboard > paste

>> How to report false positives

Kudos0

Re: Why are Sonar exclusions removed automatically?

I excluded the file in Real Time Exclusions ("The following items are ignored by Auto-Protect, SONAR and Download Intelligence") and applied. Nothing else.

The olb program has not been updated and the path did not change. I don't have the exact detection message.

I have found that a live update session ran around the time it changed. I will contact support.

Kudos0

Re: Why are Sonar exclusions removed automatically?

Please, let us know.....progress.   Thanks

Kudos0

Re: Why are Sonar exclusions removed automatically?

The answer that I received from the Norton Support is that the exclusion list is only a temporary measure and with a new update will be removed again. The only real solution is for the developer to get the program white-listed.

Kudos0

Re: Why are Sonar exclusions removed automatically?

mark-e:  The answer that I received from the Norton Support is that the exclusion list is only a temporary measure and with a new update will be removed again. The only real solution is for the developer to get the program white-listed.

Hmm, .....   Okay.    I'll watch for my user added exclusions removed.
Thanks

Whitelisting is file/version specific. Future versions will not be whitelisted by default.
New versions of your software should be submitted for whitelisting as they become available.

https://submit.symantec.com/whitelist/isv/ 

This thread is closed from further comment. Please visit the forum to start a new thread.