• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

I just uninstalled Norton Security - Too many false positives

I just uninstalled Norton Security from my computer. I now exclusively use Microsoft Security Essentials. Recently Norton Security started to remove one of my favorite and totally safe applications as security risk. I reported the false positive to Norton and received an authoritative email reply from Norton that it investigated the application and stand by its decision that it was a malware. If you are interested read the email from Norton.  Thank you very much Norton for doing stupid and totally unwarranted forceful removal of your customer's favorite software. If as a security software manufacture Norton cannot clarify which application is malicious, it should get out of business.Good bye Norton, I have been a customer for many years, but I absolutely will no longer tolerate this level of incompetence displayed by Norton.

Replies

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Had you tried to Exclude (your favored program) from Auto-Protect
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832


If no joy.....had you tried to Exclude by Signature
https://support.norton.com/sp/en/us/home/current/solutions/v54298598

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Adware and PUPs are judgement calls - they occupy a grey area where one man's useful program is another man's unwanted annoyance.  For every post on the forums complaining about Norton blocking someone's favorite program, there is another post complaining that Norton failed to block some PUP from installing.  For this reason, Norton has an option in the scans and risks settings that lets you exclude specific signatures from all scans.

Kudos1 Stats

Re: I just uninstalled Norton Security - Too many false positives

I tried to exclude Freemake from Auto-protect, it didn't work. I contacted Norton Customer Service several times. Every agent tried to fix the false positive problem and failed. I submitted false positive report to Norton, and Norton flatly denied my request saying that after analyzing Freemake they decided it was indeed a security risk. I contacted Freemake, they suggested to get rid of ad-based version which included a PUP and purchase Freemake for business which, according to Freemake, did not include any adware. However Norton removed the Freemake for business also. In the course of the series of my efforts, I received numerous security risk warnings and restart requests from Norton. Enough is enough, I got rid of Norton Security. Now Microsoft Security Essentials is on my computer, it has not sent me any security risk notices and Freemake Video Converter for business is working fine.

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Kudos1 Stats

Re: I just uninstalled Norton Security - Too many false positives

Yea I decided to check these forums too because I'm having this problem. I've been using Norton for years. This account is like 5 years old and even prior to this account I have used Norton on and off while testing various antivirus/spyware software. I gave up and just settled with Norton completely, hence this account.

I've had files that I have used on games for years without problems and then it suddenly deletes them. I use the restore and have the exclude button checked and it still deletes them. But the second time it deleted them, the restore button disappeared.

I decided to try a new MMO last week Record Of Lodoss War and it didn't delete anything. I didn't get to play it since then and started it up today and it deleted a file from X-TRAP (anti-cheat software, hundreds of users) and listed it as high risk. I restored/excluded it and tried again and it deleted it again but this time listed it as medium risk? The high risk 1 isn't even listed in my history either. wtf? Luckily the restore button stayed behind this time. I restored and waited a few minutes and I managed to get it going.

Like this is seriously starting to bug me.

Kudos1 Stats

Re: I just uninstalled Norton Security - Too many false positives

You need to exclude specific programs using the Security Risks list in "exclude from all detections" setting.

 

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

I submitted a FALSE POSITIVE report to Norton. Norton responded via email. Here's their response:

2017/04/12 (Wed) 20:18
falsepositives@symantec.com
[No Reply] False Positive submission [26940]

In relation to submission 26940.

Upon further analysis and investigation we have determined that the file(s) in question meet the necessary criteria to be detected by our products and as such, the detection cannot be revoked.

--- by "file(s) in question" Norton refers to file(s) Freemake Video Converter.

When Norton declares that "the detection cannot be revoked", there's not much else a customer can do. 

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

J39U:

When Norton declares that "the detection cannot be revoked", there's not much else a customer can do. 

 As explained earlier you can exclude a specific signature from all detections.  Norton will then ignore that signature.

Add items to the Signature Exclusions

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Hi I had the exact same issues with mine, I'm glad I read your post as I very nearly ended up purchasing the business version and since I read your post you have saved me the bother. Like you I used Freemake for years it's only last week when this all started to happen for me :-(

I have tried many times with Norton remote my machine and failed, it's been up scaled to level 2 to no avail.

In the end I've decided to ditch Freemake and have found another program for free which does the same tasks for me that's stripping audio from MP4 video's its called Freac:Audio Converter and works a treat and Norton seems happy with it, but it did come with the usual Open Candy stuff which Malware Bites dually removed for me, so for the time being I'm happy till Norton starts to remove other stuff eerrgg!!!  

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Paul Robins: [..] called Freac:Audio Converter and works a treat and Norton seems happy with it, but it did come with the usual Open Candy stuff which Malware Bites dually removed for me, [..]

Curious, from where did you download fre:ac 1.0.28?

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

The solution to this problem turned out to be very simple. You simply need to add the following to the signatures which Norton uses when scanning. Adware.FreeConvtr Then all is happy and the software remains on the system after a scan. I had two Norton representatives remotely control my PC and NONE of them tried this idea? I did start by then removing it and not using FreeMake anymore and was going to use another program to complete the same task, however I do prefer using the FreeMake Video Converter software for it's ease of use and thought there must be a way of sorting this out, after all I've been using it now for years without any issues, so reading through the Norton Community web pages above I came across several customer's who had the exact same issues and this was there solution and amazingly it worked!! Regards Paul

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Paul, Thank you for your suggestion. I will try one more time. I will add Adware.FreeConvtr to the signature that should be excluded from a scan. I should know soon whether or not this solution actually works. But like you mentioned, 4 Norton reps who remotely controlled my PC NEVER tried this method. I just hope this method works. 

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

 But like you mentioned, 4 Norton reps who remotely controlled my PC NEVER tried this method.

A reason the reps would not suggest something like this, even if they knew about it, is that they are not likely to suggest anything that might reduce your protection. 

Blocking a specific detection is risky, and could leave you system susceptible to attack.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Yes, I understand and assumed that was the reason why 4 Norton reps didn't suggest this solution. I'm still waiting to find out if the solution (excluding specific item by signature) would work. I will wait until tomorrow.

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

Yes I got version 1.0.28 I just download it from their website, works a treat, but I still prefer the FreeMake version as you can do batch processing with that, ie process loads of files in one go and go make a coffee while it's processing and not having to sit and baby sit it through every operation :-)

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

The thing is I've been using this software for years, even before I started to use Norton Anti Virus and it never had a problem with it? It's only just started to remove it since last week so obviously you must of added that Adware.FreeConvtr to your list of risks?

I know if you try to download the later version of freemake their web site is marked as Dangerous and is blocked but even then if you mange to get hold of their newer version it seems to have even more bugs in it (Why do they do this?) so I always use this older version I have which I know is relatively safe to use and it's caused me no problems in the years I've used it. I've never seen any ads pop up and I always disable their Updater Program from the start-up menu using MSCONFIG after a fresh install of it to stop it from checking for new updates!

There's no point making the system so secure that it breaks things that you use, and then you can't even do any work!! We might as well all go back to using paper and pen in that case lol

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

AV Comparatives Malware Protection Test March 2017

https://www.av-comparatives.org/malware-protection-test/

NS did very well with a protection rate of 99.89%, meaning the chances of your PC getting infected by malware while using NS are approximately the equivalent of getting struck by lightning and winning The Powerball Lottery on the same day. [your chances of visting a site or opening a documernt that is loaded with malware = A x the chances that particular piece of malware on that particular day is one that is able to slip through NS = B]

But See pg. 9 for how NS stacks up against its competitors on False Positives.

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

hok:

the chances of your PC getting infected by malware while using NS are approximately the equivalent of getting struck by lightning and winning The Powerball Lottery on the same day.

So you're telling me there's a chance. 

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

hok:

AV Comparatives Malware Protection Test March 2017

https://www.av-comparatives.org/malware-protection-test/

NS did very well with a protection rate of 99.89%, meaning the chances of your PC getting infected by malware while using NS are approximately the equivalent of getting struck by lightning and winning The Powerball Lottery on the same day. [your chances of visting a site or opening a documernt that is loaded with malware = A x the chances that particular piece of malware on that particular day is one that is able to slip through NS = B]

But See pg. 9 for how NS stacks up against its competitors on False Positives.

Yep, and AV-Test.org found much the same result re false positives.

https://www.av-test.org/en/antivirus/home-windows/windows-10/october-201...

Symantec needs to do some serious detection tweaking !

Windows 10 Home X 64
Kudos1 Stats

Re: I just uninstalled Norton Security - Too many false positives

Be Thankful -- the FP issue could be a lot worse:

"Webroot antivirus goes bananas, starts trashing Windows system files..."

Webroot's security tools went berserk today, mislabeling key Microsoft Windows system files as malicious and temporarily removing them – knackering PCs in the process.

Not only were people's individual copies of the antivirus suite going haywire, but also business editions and installations run by managed service providers (MSPs), meaning companies and organizations relying on the software were hit...

https://www.theregister.co.uk/2017/04/25/webroot_windows_wipeout/

"Webroot antivirus mistakenly flags Windows as malware
Windows' system files were flagged as malicious, and Facebook was marked as a phishing site...


A malware signature update issued by the company on Monday triggered the software into mistakenly flagging Windows system files as malware, melting down millions of managed systems around the world...

Security commentator SwiftOnSecurity tweeted that the Webroot issue was only live for 13 minutes, but the company's efforts to remediate the problem were getting stalled due to the sheer volume of clients requiring a fix.

http://www.zdnet.com/article/webroot-antivirus-mistakenly-flags-windows-system-files-as-malware/

Kudos2 Stats

Re: I just uninstalled Norton Security - Too many false positives

hok:

Be Thankful -- the FP issue could be a lot worse:

Quite the thread about this on the Webroot forum.  For anyone who is still not using a backup program to create disk images of your system - here is a good reason to start.  Stuff like this happens; rarely, thankfully, but it does happen.

https://community.webroot.com/t5/Announcements/W32-Trojan-Gen-False-Posi...

Kudos0

Re: I just uninstalled Norton Security - Too many false positives

SendOfJive:
hok:

Be Thankful -- the FP issue could be a lot worse:

Quite the thread about this on the Webroot forum.  For anyone who is still not using a backup program to create disk images of your system - here is a good reason to start.  Stuff like this happens; rarely, thankfully, but it does happen.

https://community.webroot.com/t5/Announcements/W32-Trojan-Gen-False-Posi...

Absolutely. We should al be grateful we don't have Webroot on our machines.

Reading their forums, it seems it's a pain to uninstall cleanly.

At least Norton uninstalls reasonably well !

Windows 10 Home X 64

This thread is closed from further comment. Please visit the forum to start a new thread.