Standard Users - Scanning zip-based threats

When using a Standard User account, the Security History does not update properly when scanning zip files that contain threats. The On-Demand scan results will show zero Security Risks detected, no entries under the Resolved Security Risks category and no entries in the Quarantine category.

 

To reproduce:

 

  1. Login to a Standard User account.
  2. Visit the EICAR web site and download the EICAR test zip file.
  3. Open Windows Explorer, locate the EICAR zip file, right-click and scan the file.
  4. The EICAR test file will be detected and removed.
  5. Close the On-Demand scan window.
  6. Open Security History and check the categories mentioned above.

The only evidence that the EICAR test file was detected will be a Statistical Submission and a Detection event recorded in the Performance Graph.

 

Norton Security
22.0.0.91
Windows 7 Home Premium
7601.18409.amd64fre.win7sp1_gdr.140303-2144