このフォーラムスレッドには解決策が必要です。
拍手0

False positive: ever get answers??

投稿日: 2022-06-02 | 21:33 · 返信 12 · · 翻訳:

How to get an answer for the below? Do I need to resubmit every day, or what approach have you folks used to get a response?

Issue happens (on Windows 10 Pro or Home) whether using Chrome or Edge or Firefox if Norton Safe Web is enabled. (If that extension is disabled, the false positive does not happen.) Norton Deluxe, all software with all latest fixes.

DSLextreme: https://mail.dslextreme.com/mail is their Webmail pages. Trying to download attachments trigger false positives ("dangerous website"). Happens with PDF invoices from companies like Sparkletts and Sears. (Under the covers, DSLextreme uses Zimbra.)

Have not heard back after 2 weeks. 

Submission ID:
9b04697d-3775-4133-86cd-bfd028750f3a
Submission type:
False positive
Submission status:
Your submission is being processed
Submission details:
Analyzing (up to 48 hours)
Updated:
Tue, 17 May 2022 05:55:10 GMT

A random old guy in Surf City USA thanks you in advance!

ラベル: False Positive, Firefox, Google Chrome, Microsoft Edge

返信

拍手0

Re: False positive: ever get answers??

投稿日: 2022-06-03 | 00:27 · 編集日: 2022-06-03 | 00:30 · パーマリンク

Submission ID: 9b04697d-3775-4133-86cd-bfd028750f3a

https://submit.norton.com/?type=CHECK&submission_id=9b04697d-3775-4133-86cd-bfd028750f3a

We'll try to call attention.  

拍手0

Re: False positive: ever get answers??

投稿日: 2022-06-08 | 03:25 · 編集日: 2022-06-08 | 03:26 · パーマリンク

@SurfCity

can you post a screenshot of the detection or link which is detected?

How to post an image in the forums
https://community.norton.com/en/forums/how-post-image-forums-0

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-01 | 16:52 · パーマリンク

Attached are the images. Needless to say, fails on Chrome, Firefox and Edge. Of course, all updated to latest level, as is Windows 10 Pro. As I said before, turn off Safe Mode plugin and the PDF downloads well, and when scanned Norton reports no problem.

First: in DSLextreme webmail, I click the Sparkletts PDF to download it:Nothing happens: nothing pops up or appears in the folder: it remains empty. Then I logout of Webmail and get:Looking at Norton Security History this is what I see. 

By the way, This is over a month old now. I just did a status inquiry, and this is what I got:

Submission ID:
9b04697d-3775-4133-86cd-bfd028750f3a
Submission type:
False positive
Submission status:
Your submission is being processed
Submission details:
Analyzing (up to 48 hours)
Updated:
Tue, 17 May 2022 05:55:10 GMT

ANY IDEAS?

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-01 | 17:07 · 編集日: 2022-07-01 | 17:30 · パーマリンク

SurfCity:

By the way, This is over a month old now. I just did a status inquiry, and this is what I got:

Submission ID:
9b04697d-3775-4133-86cd-bfd028750f3a
Submission type:
False positive
Submission status:
Your submission is being processed
Submission details:
Analyzing (up to 48 hours)
Updated:
Tue, 17 May 2022 05:55:10 GMT

ANY IDEAS?

@SurfCity
We'll try to call attention with your added details/images.   
Thanks

from your screenshot - I can see: 

https://mail.dslextreme.com/service/home/~/...

Dispute submitted successfully

https://safeweb.norton.com/report/show?url=https://mail.dslextreme.com/service/home/~/... = Warning -> Malicious Sources/Malnets | Technology/Internet

拍手1 統計

Re: False positive: ever get answers??

投稿日: 2022-07-01 | 17:19 · パーマリンク

SurfCity:

Looking at Norton Security History this is what I see. 

The Unauthorized Access Blocked messages in your security history are logged by Norton Product Tamper Protection when an executable file attempts to read/write/edit/delete a Norton file.  Common Windows processes like svchost.exe, taskmgr.exe, dfrgntfs.exe, etc. as well as executable from third-party software will cause an Unauthorized Access Blocked message to be logged if they touch a file from your Norton installation. Please see post <here> in the Product Suggestions board regarding logging of these blocks. (credit Imacri)

Norton Product Tamper Protection events are not reports of malware.  Unauthorized Access Blocked (Access Process Data) messages in your security history are not reports of malware.  The most common Norton Product Tamper Protection log entries are legitimate Windows processes that Norton is preventing from accessing Norton files or processes.  

Norton Product Tamper Protection events are normal, as legitimate programs and Windows processes frequently try to access Norton files or processes.  Norton blocks attempts by outside agents - even legitimate Windows processes.  There is no need to do anything.  No need to scan with a third-party anti-malware program, no need to change services settings.  These events are not attacks.  They can be ignored.  Unless the actor in the logs is an actual malicious process that does not belong on your PC, these events are totally harmless and routine. (credit SendOfJive)

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-01 | 21:09 · パーマリンク

Thanks for a great set of info and insights!

However, the issue is: I cannot download the entirely-innocent PDF file unless I disable Safe Web.

Other PDFs from other people can be downloaded. Just wondering what might be special about DSLextreme email attachments from Sparkletts...DSLextreme uses the Zimbra email infrastructure for their processing.

Maybe, I just need to live with it until next major version of Norton Security?

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-02 | 01:34 · 編集日: 2022-07-02 | 01:41 · パーマリンク

SurfCity:

However, the issue is: I cannot download the entirely-innocent PDF file unless I disable Safe Web.

Other PDFs from other people can be downloaded. Just wondering what might be special about DSLextreme email attachments from Sparkletts...DSLextreme uses the Zimbra email infrastructure for their processing.

Curious, have you tried turning off Norton Safe Web Link Guard...as test? 
https://support.norton.com/sp/en/us/norton-identity-safe/current/solutions/v136929852
-
We'll try to call attention, again, with your added details/images.   
Thanks 

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-05 | 10:22 · 編集日: 2022-07-05 | 10:44 · パーマリンク

@SurfCity - Please check your side.  

https://mail.dslextreme.com/


https://safeweb.norton.com/report/show?url=https://mail.dslextreme.com/ = Safe -> Technology/Internet

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-06 | 22:46 · パーマリンク

Hi,

Sorry for the issue you are facing.

We will review this Site/URL and comeback on the same.

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-13 | 20:43 · パーマリンク

Hi SurfCity,

This issue should be resolved now. Can you please confirm?

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-14 | 18:16 · パーマリンク

Hallelujah!! No more false positive: Safe Web is on, and working as it should for other sites.

For this site, the PDF was successfully download, there were no nasty messages.

IT IS WORKING....thanks to everyone who helped!

拍手0

Re: False positive: ever get answers??

投稿日: 2022-07-14 | 18:23 · 編集日: 2022-07-14 | 18:23 · パーマリンク

Thanks

This thread is closed from further comment. Please visit the forum to start a new thread.