• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Norton Security removing files marked for exclusion

1. http://download.mantratecapp.com/StaticDownload/MantraRDServic
e.exe

2. http://download.mantratecapp.com/StaticDownload/MFS100Driver.e
xe

These files are required by me for my Mantra fingerprint scanner but are removed by Norton as high risk. I had a chat today morning who helped by remote control. But after some time it is again deleted/ removed (auto protect removes these). I have tried all possibilities visible in Norton but couldn't find a place where I can exclude my folder and stop Norton from removing immediately on download. This is important as required for giving digital life certificate and device and software approved by Govt. agency. Could you please provide a solution or only way is to remove Norton?

File Attachment: 

Replies

Kudos0

Re: Norton Security removing files marked for exclusion

You can exclude those files from detection/removal following the steps in this KB Article  Exclusions / Low Risks

Hope it helps.

P.S. When you need to add an image to your post, can you please follow the instructions below so that it can be easily seen by everybody? Thanks. 

https://community.norton.com/en/forums/how-post-image-forums-0

Windows 7 HP SP1 32-bit | Chrome 65.0.3325.146 | NS 22.12.1.15
Kudos0

Re: Norton Security removing files marked for exclusion

Thanks. I hope this solves my problem. Regarding file uploaded, It was export file from 'recent history' which is in txt format just to give idea on steps taken and repeated deletions. will try to convert same into image next time.

Once again thanks.

Kudos0

Re: Norton Security removing files marked for exclusion

Y're welcome, and please let us know if it did help. Thanks.

Windows 7 HP SP1 32-bit | Chrome 65.0.3325.146 | NS 22.12.1.15
Kudos0

Re: Norton Security removing files marked for exclusion

Sorry, the solution given above didn't help. Norton is still not allowing downloads and removing files. I had no option but to remove Norton Securty to enable me to continue with my process. In the process my Norton Identity safe toolbar is also removed. Will look for some option where I have control on allowing downloads and safe files.

Kudos0

Re: Norton Security removing files marked for exclusion

Please tell us what Norton is telling you regarding this event.
For information regarding this event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste here.

If you believe Norton made a mistaken detection, you may submit a dispute at. https://submit.symantec.com/false_positive/.


Heur.AdvML.C) detected by Auto-Protect,Quarantined,Resolved - No Action Required,Threat Actions performed: 1
01-Nov-17 5:35:06 AM,Medium,mantrardservice.exe (WS.Reputation.1

Perhaps you'd need to exclude from all detections.  #4
Um, did you Exclude from Scans and Exclude from Auto-Protect?Restore & exclude this file: is not the same as adding item(s) to Exclude from Auto-Protect nor the same as Exclude from All Detections.


Please review:

1) Restore an item from Quarantine
https://support.norton.com/sp/en/us/home/current/solutions/v6200368

2) My Norton product alerts that the file I downloaded is not safe, and deletes it
https://support.norton.com/sp/en/us/home/current/solutions/v80629965

3) My Norton product incorrectly alerts that a file is infected, or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832

4) Add items to the Signature Exclusions
https://support.norton.com/sp/en/us/home/current/solutions/v54298598

5) Turn off or turn on Download Intelligence
https://support.norton.com/sp/en/us/norton-security/current/solutions/v23920640

6) My Norton product detects a file or program as a threat even after I exclude it from scan
https://support.norton.com/sp/en/us/home/current/solutions/v115455517


 If you believe Norton made a mistaken detection, you may submit a dispute at. https://submit.symantec.com/false_positive/.

Kudos0

Re: Norton Security removing files marked for exclusion

Since I had deleted Norton so that I can work, I can't do what you have suggested. But same exercise was done by me in my original post. I had used export and it gave me text file which I posted in my original post. This probably could not be read by you. https://community.norton.com/en/system/files/node-file-attachments/Recen...
Kudos0

Re: Norton Security removing files marked for exclusion

Copy to Clipboard per event usually tells me more than History log. YMMV

For information regarding this event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste here.

 Thanks

From this distance I cannot see events, on your machine. 
I see you turned off Download Insight and Auto-Protect. 
I see Norton signature flags.
WS.Reputation.1 suggests new item with few users and Heur.AdvML.C (heuristic machine learning) may be false flag.
I see possible False Positive.
I see perhaps need for Exclude from All Detections.

If you believe Norton made a mistaken detection, you may submit a dispute at. https://submit.symantec.com/false_positive/.
Regards w Respect

FWIW ~ from this distance:  are these your samples?
File: MFS100Driver.exe
File size: 15.1 MB (15,811,824 bytes)
MD5 checksum: 13B6E93B8400B381DD9FBDCFAAEAB9B5
SHA256 checksum: 58C1307F5A8D37963B2A868A1E0344A4ADCD54CCBC0E75EDE6D860322477D0E1

File: MantraRDService.exe
File size: 3.29 MB (3,449,000 bytes)
MD5 checksum: A4DA5AE9259C1D40785E88A852719806
SHA256 checksum: A646EC2E33B83A6AA1323856048AAC231CE591CDB20FE8B9C95D708598D4447B


I do not see source for office 2010 toolkit.exe (Heur.AdvML.B).
I do not see source for JeevanPramaanInstaller_v3.0.exe. 

I see McAfee Security Scan Plus reference.

Sorry, Copy to Clipboard per event usually tells me more than History log. YMMV
Good luck. 

This thread is closed from further comment. Please visit the forum to start a new thread.