SONAR has a vulnerability when you run different type of malwares from desktop location. If you run some malwares from desktop S.ON.A.R. can't block the files. If you run the same files from other locations S.O.N.A.R is able to remove the threats.
Please, test these 3 files : Tracking #21961614
I think it is a serious problem and I hope to have an answer soon.