How to ignore files that cause false threats detected?

Norton keep prompting Threats Detected on an installation file downloaded from Microsoft website. How do I tell Norton to ignore this file? There is no option for me to do this! So frustrating.

Hi bhwong,

 

Can you follow the steps in this post by PapauZ and let us know if this helps.

 

Thanks,  Dave.

I don't see all the mentioned items in my menu. Some of the menus are gray off too.

 

Could it because I'm not using my administrator windows account and I have log out and log in as administrator in order to do these? I tried run as administrator and these menus are gray off too.

Can you try logging in with your Windows Administrator Account?  :smileywink:

 

Thanks,  Dave.

I log in as admin but was not able to access my user account folders. The workaround will be creating a root folder and exclude it from virus scan, then log in to my user account and drag the false threat files into this folder. This is really troublesome. Norton should have designed it more functional for end users who are not administrator since Microsoft has recommended not to use administrator account for normal use.

It's still prompt about the threat on the file that is no longer there! This is a bug!

Which Norton product are you using, and what version? Click on Support - About.

 

Have you run LiveUpdate and rebooted your computer until no updates are available?

 

PapauZ's instruction should still work once you can find your Quarantine History. If you have Norton Internet Security, you click on Advanced from the main page. Then in the Scan section, click on Quarantine. From here you can follow PapauZ's instructions

 


4. On the list find the file you want to restore
5. Click on More Details (bottom, right side)
6. On the new window click on Options (bottom)
7. Click on Restore file
8. Check the "do not detect it any more option" during the restore
9. Close windows

Hi,

 

I'm using Norton Internet Security version 19.7.0.9 with LiveUpdate runned.

 

The false threated file is too big (600MB) to backup into Quarantine, so I can't delete also.

 

My workaround is to create a folder to be excluded from scan and moved this file there. But it still show this threated file on the original location.

 

To overcome this, I simply re-create an empty file with the same filename for Norton to remove. Problem solved. This is just so silly!

The problem is back and it's getting really frustrating to have it prompt every few minutes. Look like it's time that I uninstall it and switch to the competitor!

 

btw, I notice that Norton firewall affect my IP scanner, making it equally frustrating for IT pro to troubleshoot their network!

See attached screen capture where even as Admin account, I do not have the option to ignore the file and is forced to delete it without backup, unless I want to get bugged by the every few minute prompting. Is this a bug or oversight?

 

norton-resolvable-error.gif

 

norton-resolvable-error2.gif

 

norton-resolvable-error3.gif

It seems like you have Compressed file scanning turned on in your Norton. Turn it OFF and then Clear the Norton History Entries then Check. Even if you have created an Exclusions folder, while running the Software the Temp files/Supporting files get created outside of the folder in some other location, which makes the usage of that software difficult. Create exclusion for Specific Files and see.

So the only possible solution is to turn off file scanning of compressed file? This will mean that I will have no protection when opening compressed file?

 

What if the file that cause Norton false alarm is not an compressed file? Does this mean that I will have to completely disable file scanning then? This is not acceptable, isn't it? 

 

How can I feedback to Symantec to fix this bug?


bhwong wrote:

So the only possible solution is to turn off file scanning of compressed file? This will mean that I will have no protection when opening compressed file?

 

What if the file that cause Norton false alarm is not an compressed file? Does this mean that I will have to completely disable file scanning then? This is not acceptable, isn't it? 

 

How can I feedback to Symantec to fix this bug?


Hi,

Turning off the scanning of compressed files will not reduce your protection when you decompress them.

If the file is not compressed and is causing a false positive then it can be reported here;

https://submit.symantec.com/false_positive/

You should not have to disable file scanning under any circumstance, of normal use.

If you are willing to share more about what you are trying to do and where you are trying to do it we may be able to suggest ways to reduce the warnings.

Thanks

I'm not trying to do anything. I just want Norton to stop prompting frustrating alerts every few minutes over the same file again and again! It refused to acknowledge that I have already place this file under the ignore list! Why?

 

Anyway, I have reported it to the https://submit.symantec.com/false_positive/ you have provided. Hopefully Symantec do something to make their product more usable.

 

 

I have reported this false positive but it appears that right-click to scan and auto-scan are using 2 separated virus definition/engine as the right-click did not detect any threat from this file but the auto-scan keep prompting alert of an false positive. This is really a silly implementation.

There may be an issue with your NIS installation.

 

Try running Autofix by clicking on Support - Get Support. This will check your installation and fix what it finds.

 

Reboot and test your system.

 

If that does not work, try the Norton Removal and Reinstall Tool.

 

Download NRnR from here.

Back up your Identity Safe data if you use this feature.

Run the NRnR tool. As the name says it will remove your installation, and reinstall a fresh copy on your computer.

Run LiveUpdate manually a few times, rebooting as necessary, until no updates are available.

Import your Identity Safe data.

 

Reboot and test again.