Hi everyone,
my NIS 18.1 final detected with SONAR a virus in c:\users\[username]\appdata\local\tific\download\dllhost.exe that is a folder created by NortonLive PC Checkup that I have downloaded and installed by http://www.symantec.com/norton/nortonlive/free-pc-checkup.jsp Download Insight checked the file and trust it. After the installation, during pccheckup scan SONAR find the threat and quarantined it.
How is it possible?

http://img691.imageshack.us/i/62989856.jpg/
http://img186.imageshack.us/i/88577024.jpg/
Thanks in advance for replies.