Norton Internet Security 2010 SONAR detected "symantec threat monitor" as suspicious

As the title says i have here copy/pastet the info from the security History screen:

 

Not Available
____________________________
____________________________
On computer as of
23-09-2009 at 21:48:26
Last Used:
23-09-2009 at 21:48:56
Startup Item: No
Launched: Yes
____________________________
____________________________
Few Users
Fewer than 100 users in the Norton Community have used this file.
____________________________
High
This file risk is high.
____________________________

Threat Details
SONAR Protection monitors for suspicious program activity on your computer.
____________________________
Origin

Downloaded from  Not Available
____________________________
URL Not Available
UNTESTED

Source
symantec threat monitor, powered by deepsight.scr
____________________________
File Actions
File: c:\windows\system32\symantec threat monitor, powered by deepsight.scr
Restart Required
Running program: c:\windows\system32\symantec threat monitor, powered by deepsight.scr
Terminated
____________________________
File Thumbprint:
Not Available
____________________________

 

Lol epic fail by symantec :)?

I am running Windows 7 Build 7600 RTM…?

As the title says i have here copy/pastet the info from the security History screen:

 

Not Available
____________________________
____________________________
On computer as of
23-09-2009 at 21:48:26
Last Used:
23-09-2009 at 21:48:56
Startup Item: No
Launched: Yes
____________________________
____________________________
Few Users
Fewer than 100 users in the Norton Community have used this file.
____________________________
High
This file risk is high.
____________________________

Threat Details
SONAR Protection monitors for suspicious program activity on your computer.
____________________________
Origin

Downloaded from  Not Available
____________________________
URL Not Available
UNTESTED

Source
symantec threat monitor, powered by deepsight.scr
____________________________
File Actions
File: c:\windows\system32\symantec threat monitor, powered by deepsight.scr
Restart Required
Running program: c:\windows\system32\symantec threat monitor, powered by deepsight.scr
Terminated
____________________________
File Thumbprint:
Not Available
____________________________

 

Lol epic fail by symantec :)?

Me too, x64 edition. The screensaver is a 32 bit screensaver though. All works fine however.

Why the hell did mine detect it then :s? Is there a way to troubleshoot this…?

Don't know to be honest. Try downloading it again maybe.

 

Is your SONAR Advanced mode settings set to Automatic or Agressive?

Automatic…

My SONAR is set to Aggressive and it just blasted it several times in a row. I think it must have been connecting to the internet to update and SONAR didn't like a .scr file doing that, which is fairly understandable.

 

Clicking the 'exclude' checkbox seemed to make no difference, so I manually put these 2 exceptions into the exceptions list.

 

C:\Windows\SysWOW64\Symantec Threat Monitor, Powered By DeepSight.scr 

 

C:\Windows\system32\Symantec Threat Monitor, Powered By DeepSight.scr

 

 

If you are on 32 bit, you will only need the second one.

 

 

It seems to work nicely now.

lol still removes even after adding exclusion. Might have to install the patch :s…

To be honest, that threat monitor uses a ton of CPU when it is running anyway, so it’s not the most ideal screensaver. It hasn’t been removed from mine since I put the exclusion in though.


Salihb wrote:
lol still removes even after adding exclusion. Might have to install the patch :s..

 

BTW, you need to put it in both the scan and autoprotect exclusions for it to not be detected.

metalhead82 wrote:

Salihb wrote:
lol still removes even after adding exclusion. Might have to install the patch :s..

 

BTW, you need to put it in both the scan and autoprotect exclusions for it to not be detected.

I know and done already ;)