Norton detects my software as suspicious MH690 virus (false positive)

I could not find a better way of reporting this.

Norton detects my software as a virus.

 

This happened last week, I recompiled from source and it worked, in yesterdays update you guys block it again.

Why??

 

This program has over a million downloads and is a popular program to convert movies to make them play on sony ps3.

 

Installer: {Removed}

 

The exact file that is getting detected as virus is {Removed}

 

All this file does is download updates for the program.

 

Please fix this.

 

Screenshots:

http://i207.photobucket.com/albums/bb156/madjomack/Untitled2.jpg

http://i207.photobucket.com/albums/bb156/madjomack/Untitled3.jpg

 

[edit: Removed links to files, please link only to webpages or graphics. Direct links to executables are not permitted per the Participation Guidelines and .]

Message Edited by Allen_K on 01-30-2009 01:06 PM

"In rare cases where a legitimate file has been misidentified and subsequently quarantined, your computer may behave abnormally or you may find that one or more applications no longer function as expected. In such rare situations, you should open the Quarantine in your Symantec antivirus product. From here, you may review the list of all files detected as Suspicious.MH690 and, if you identify a potential misidentification, restore the file from quarantine and allow it to run normally."

 

 

So since this program is not a virus and i would like to run it. All i need to do is restore the file from Quarantine. Did that but when i go to run the program norton throws it back in there... So how do i Allow it to run normally.

 

NAV2009GE

I could not find a better way of reporting this.

Norton detects my software as a virus.

 

This happened last week, I recompiled from source and it worked, in yesterdays update you guys block it again.

Why??

 

This program has over a million downloads and is a popular program to convert movies to make them play on sony ps3.

 

Installer: {Removed}

 

The exact file that is getting detected as virus is {Removed}

 

All this file does is download updates for the program.

 

Please fix this.

 

Screenshots:

http://i207.photobucket.com/albums/bb156/madjomack/Untitled2.jpg

http://i207.photobucket.com/albums/bb156/madjomack/Untitled3.jpg

 

[edit: Removed links to files, please link only to webpages or graphics. Direct links to executables are not permitted per the Participation Guidelines and .]

Message Edited by Allen_K on 01-30-2009 01:06 PM

Hi madjomack,

 

If the Norton program detects and removes the program again and if you 100% confident that the program is legimate, then you have to exclude that particular file/folder from Auto-protect and Manual Scan. Following are the instructions for Norton 2009 product. 

 

1. Start Norton AntiVirus 2009.
2. In the Computer pane, click Settings.
3. Under Exclusion/Low Risks, click Configure next to Scan Exclusions.
4. Under Scan Exclusions, click Add.
5. Browse and select the folder or file you would like to exclude and click OK. If you want to include subfolders within the folder, check Include Subfolders.
6. Under Auto-Protect Exclusions, click Add.
7. Browse and select the folder or file you would like to exclude and click OK. If you want to include subfolders within the folder, check Include Subfolders.
8. Click Apply > OK.

 

Here is a similar thread (SOLVED) regarding MH690 detection.

http://community.norton.com/norton/board/message?board.id=nis_feedback&message.id=27492&query.id=55686#M27492

 

Yogesh

Message Edited by yogesh_mohan on 01-31-2009 01:24 AM

The point is norton should not be blocking it in the first place.

Making a manual exception is not an acceptable solution.

Hi 3r1c,

 

I also agree that adding the manual exception is not the solution. It's just a workaround for time being. If you submit that file to Symantec Security response with the details of the detection, Symantec can analyze the file further. If it is found clean and can be trusted as authenticated one, then Symantec will update the definitions for MH690 detection to exclude the particular file and then release a patch with updated definition. So, after that LiveUpdate patch, Norton program won't block it. But the point is, you should submit the file to Symantec Security Response as early as possible, so that you can get quick results.

 

Yogesh