Since the latest version 24 of Norton 360 Deluxe I get a message every hour
that a new Icarus.exe from a new temporary directory wants to connect to the internet.
Since I monitor and release all programs that require an Internet connection, this is annoying.
Is it possible to influence the behavior or at least set Norton 360 to download updates only every 24 or 48 hours?
fwiw ~ may be related:
Hello @bjm,
Thanks the Topic For a week or so, the firewall asks everytime if icarus.exe can connect even an allowed rule is set - #170 by user542 - Avast Free Antivirus / Premium Security - Avast Community confirms that the problem is known and that no solution is yet available.
I have solved the problem for myself by deactivating Liveupdate and will only update it manually once a week. Confirming two pop-ups every hour is too tedious for me.
@Dave36 Chances are this is strictly an annoyance problem but just to be on the safe side, search your system drive for icarus.exe. I’m cautious so when I come across atypical behavior in my computer, I dig a little deeper.
While icarus.exe is part of the Norton (Avast) app, malwares can masquerade as legitimate executables. If part of Norton, the file would typically be found in C:\Program Files\Common Files\Norton\Icarus. If you find the file in another folder, like C:\Windows or C:\Windows\System32 folder, then upload that icarus.exe file to VirusTotal to get it scanned. VirusTotal
On my system, there are two instances of icarus.exe, both where they should be but I found icarus_rvrt.exe in the Windows\System32 folder. VirusTotal scans didn’t find anything suspicious in any of those.
Here’s a link to more info about icarus.exe icarus.exe Windows process - What is it?
Hello @Puzzler,
Thank you very much for your feedback. I also have two Icarus.exe on the system, once under c:\Program Files\Common Files\Norton\Icarus\norton-suite\ and a second time under c:\Program Files\Common Files\Norton\Icarus\norton-av-vps\ both are harmless or fine. Virustotal has confirmed this.
The problem is that Norton generates two more Icarus.exe files every hour under C:\Program Files\Common Files\Norton\Icarus\norton-suite\temp\asw-df97ab65-1da0-40c8-a90d-ef3269f24486 (random id) and each time the new Icarus.exe requests permission from the firewall.
But as I said, I have now deactivated the automatic live update as a workaround. It’s probably not in the spirit of an antivirus that you update it manually every week, but if the software developers don’t think about it, the user has to find a solution…
@Dave36 You’re most welcome. Glad the executable files were fine. Always good to check when in doubt.
Icarus.exe certainly reproduces files like rabbits. Fortunately I haven’t had trouble with firewall permission popups on icarus but I have had trouble with a couple of my default firewall rules set to permanently block that get ignored by N360. Permission windows still spring to life after a few days asking whether to allow or block. When I review the firewall and program settings, those apps are still marked as blocked and no new incidence of the app showing up in the list. So there’s definitely a bug.
Giving up on ver 24 on this computer for now and reverting to the previous version until these bugs get sorted out. I’ve already done that on two computers but kept ver 24 on one to track bug fix progress but I’m too old to be playing whack a mole. 
You mentioned manually updating once a week. I suggest daily because of the proliferation of zero day viruses. Just a thought. I do that on two of my computers running the previous version of Norton. Since Live Update is disabled to prevent ver 24 from self installing, I have to download and manually install new virus def files daily from Security Center Download Detail
All: icarus.exe is a file known to AVG product which has evidently been incorporated into the 24.xx Norton release. Its the new live update as you are all posting. Can it be tamed? Not from a user standpoint. It is hard coded. Why is it running with that frequency? Again, unknown. I would suspect garnering telemetry would be the issue. That’s just an educated guess on my part as I had the same issues when on 24.xx and high CPU usage because of it.
Please have a look at another post of mine here regarding the collection of data. Its amazing what the staggering amount of it actually is.
SA
