Why do I keep getting these SONAR warnings regardless of what web-site I'm on? See attached picture.
If you think Norton made a mistaken detection, you may submit dispute at https://submit.symantec.com/false_positive/.
Please tell us what Norton is telling you regarding this event.
For information regarding this event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste here.
Threat name: SONAR.Cesaletat!gen1Full Path: c:\windows\system32\wscript.exe
On computers as of
4/11/2018 at 7:34:34 PM
9/15/2018 at 9:28:01 AM
SONAR Protection monitors for suspicious program activity on your computer.
wscript.exe Threat name: SONAR.Cesaletat!gen1
Hundreds of thousands of users in the Norton Community have used this file.
This file was released 7 months ago.
This file risk is high.
Source: External Media
File Thumbprint - SHA:
File Thumbprint - MD5:
For second opinion choose File &or Search hash at VirusTotal.
Please see related: https://community.norton.com/en/forums/sonar-suspicious-activity-wscriptexe
Running file insight on my production computer results in the screenshot below. First suggestion is to run Rkill to check for malware processes, registry entries for malware and have it terminate them. Follow-up with a standard scan with Malwarebytes and see what if anything it detects.
Thanks for reporting in Norton Community Forums. Can you please submit the files for further analysis? Once files submitted please share the submission tracking number for follow up.
Report a Suspected Erroneous Detection (False Positive) to Symantec
I uninstalled Norton Security, installed Malwarebytes and ran a scan. It removed a few things and then reinstalled Norton. No more warnings now.
Good news gg. If your issue has been resolved please mark the appropriate post that is the solution. Others may then see the solution in the event that they are having a like or similar issue. Glad we could assist.
If you are experiencing an issue that needs urgent assistance please visit our customer support area:
There are currently 5 users online.