NIS 2009 Sonar blocking unlocker.exe

Archive
1

I am literally tearing my hair out with frustration at the way Symantec handles a particular so called Suspicious ADH Heuristic Virus.

All of a sudden it has decided to remove one of my downloaded program files which has been on my computer since last year. It was scanned by Norton at the time it was downloaded and was reported clear of any malware.

The file is unlocker 1.8.8.exe

It has removed the file to quarantine (high risk it says) and cannot be 'restored and ignored' because as I understand it the computer has to be re-booted for this action to take place.

I can restore it without re-starting the computer but immediately it is restored Norton kindly removes it again. Then why have this restore function then!

I tried turning off Sonar and even as a last resort tried turning off Anti Virus Protection altogether to download the file from a different source (FileHippo) and under a different name but on turning back on Anti Virus protection the file is removed again.

I also tried adding the file to exclusions but this also has no effect whatsoever.

Norton at the very least should allow me to restore and scan the file to confirm its security risk but to block every attempt to install the file again when an exclusion has been registered is quite ridiculous.

You cannot ‘Restore & Exclude’ because there is no button for that action. Note that it does not say anything about restoring High Risk items. To quote from the help files ………….

To restore an item from the Quarantine

  1. In the Security History window, in the Quarantine view, select the item that you want to restore.
  2. Click More Details.
  3. In the Advanced Details window, under Actions, click Restore & Exclude.
  4. In the Quarantine Restore window, click Yes.
  5. Click Close.

I have been a loyal user of NIS for many years now but I cannot continue with Norton blocking my daily work schedule like this. I see that other users have had similar experiences with Sonar but Symantec does not seem to have taken on board users complaints. I have also resisted upgrading to NIS 2010 for the very reasons outlined above.

I have also had to disable Norton IPS and Norton Toolbar in Firefox because they are constantly producing false information and yet again have become incompatible with a Firefox update (3.6).