I have a file which is repeatedly flagged and quarantined even though I have it excluded for scans and is allowed to execute in network settings "firewall".
How can I proceed to avoid this hassle? Is there a way to proceed from "quarantine" to exclude the file from being flagged?
Thanks
Arturo
Hi Arturo,
Welcome to the Norton Community. What Norton product do you have and its exact version from Help > About or Support > About? What OS and SP do you have and is it 32 or 64 bit?
What file is Norton quarantining? Is this a file you created/compiled or something you got online somewhere? How do you know this file is safe? Also, are you getting a SONAR warning or File Insight warning.
The firewall is not the place to configure to prevent a file from being quarantined. Once you let us know which product you have and answers to the other questions, we can advise further.
Hope this helps.
Best wishes.
Allen
Hi Arturo,
I was wondering if was worked for you?
Best wishes.
Allen
These are the steps I've taken and apparently the problem is solved.
-Upgrade to NIS 2011
-Exclude from scans.
-Exclude from auto protect and Sonar.
-Allow execution in Network Control / program control
With NIS 2011 the file was flagged as high priority threat but I don't know why and mawbe you can help, it was not deleted and automatically quarantined.
I was asked to resolve the issue, which I just ignored.
Arturo
Dear Sir,
I have a file which has to be deployed in a remote computer for surveilance "SniperSpy", this file probably behaves as a virus and as such it's flagged but obviously it's clean.
I've tried all the following with no results trying to get Norton Internet Security Suite 2010 to not block and automatically delete the files installed by the module on the remote computer:
-Exclude from scans.
-Exclude from auto protect and sonar.
-Allow in smart firewall the execution.
-Restores once and again from quarantine the deleted files.
Sooner or later NIS will delete and quarantine the two files installed on the remote computer.
Please advice urgently.
Hi ameneses54,
If the program is SpySniper, it can be excluded as follows:
You need to exclude this using the list of security risks that you will find in the Norton product. You are looking to exclude a signature, rather than an item. I know this is able to be done in NIS 2010, but I am now using NIS 2011 so the following instructions may vary a bit from what you need to do. If you need more detail, use the Help function in your Norton product for advice on excluding security risks or signature exclusions.
In Norton Computer Settings, click Configure[+] for Signatures to exclude from all detections. Click Add. After the list of security risks loads scroll down to SpySniper, select the entry and click Add. Click Apply and OK.
Unfortunately the program is "SniperSpy" and it's not on the list.
Like it looks like Sonar is the culprid, do you have any other advice.
Arturo
Hi,
Can you post a screenshot of the detection? If you exclude both executables from AP and SONAR, you should no longer be seeing SONAR convict them.
These are the steps I've taken and apparently the problem is solved.
-Upgrade to NIS 2011
-Exclude from scans.
-Exclude from auto protect and Sonar.
-Allow execution in Network Control / program control
With NIS 2011 the file was flagged as high priority threat but I don't know why and mawbe you can help, it was not deleted and automatically quarantined.
I was asked to resolve the issue, which I just ignored.
Arturo
HI Arturo,
Typically high priority detection occurs when Sonar determines that the file is acting suspiciously enough to constitute an "immediate or imminent" risk to your computer.
I don't pretend to know all of the criteria which goes into making that determination since I didn't program it. 
It would still help if you can attach a snapshot of the popup window showing the threat to your reply here. You can do this using the 
symbol at the top of the reply editor.
Best wishes.
Allen
