Adlice forum

Software feedback => RogueKiller => Topic started by: linkboy on April 02, 2019, 05:58:27 AM

Title: nortonsecurity.exe detected as a threat?
Post by: linkboy on April 02, 2019, 05:58:27 AM

Please see attached picture.  I have used Norton for long time. Never reported as an issue.But pops up as a threat today. Is this a software issue or may be mine being infected?

Title: Re: nortonsecurity.exe detected as a threat?
Post by: Curson on April 03, 2019, 07:09:37 PM

Hi linkboy,

This is likely a false positive.
To determine what's going on, please do the following :

• Download Process Explorer (x64) (http://live.sysinternals.com/procexp64.exe) and save it to your desktop.
  
• Click on the setup file (procexp64.exe) and select Run as Administrator to start the tool.
  
• Locate the process named NortonSecurity.exe, right click select Create Dump > Create Full Dump...
  
• Save the dump on your desktop, compress it and upload it on Google Drive/Dropbox.
• Share the link in your next reply.

Regards.

Title: Re: nortonsecurity.exe detected as a threat?
Post by: linkboy on April 04, 2019, 04:31:08 AM

I have seen two norton process, which one to dump the file? please see image shot.

Title: Re: nortonsecurity.exe detected as a threat?
Post by: Curson on April 04, 2019, 05:39:00 PM

Hi linkboy,

Could you please dump both ?

Regards.

Title: Re: nortonsecurity.exe detected as a threat?
Post by: linkboy on April 05, 2019, 02:01:03 PM

Created full dmp files and posted for you via PM. Thank you, in advance.

Title: Re: nortonsecurity.exe detected as a threat?
Post by: Curson on April 05, 2019, 04:39:26 PM

Hi linkboy,

Many thanks for your feedback.
We were able to pinpoint the rule who was causing this false positive and fixed it.

The new detection ruleset will be available shortly and Norton processes won't be detected anymore.

Regards.