Norton Security Found SONAR.Heuristic.110 in version 8.1.04592

[expired user #7375]'s profile image [expired user #7375] posted 10 years ago in General Permalink
Just updated to the latest nightly build and my Norton 360 reported
Filename: heidisql.exe
Threat name: SONAR.Heuristic.110
This file risk is high.
ansgar's profile image ansgar posted 10 years ago Permalink
That was already reported in a recent post, and I have sent appropriate details to the Norton website. Didn't you update your Norton since several weeks?
[expired user #7375]'s profile image [expired user #7375] posted 10 years ago Permalink
I get daily updates and my signatures and program should be up-to-date. This is coming from their SONAR (Symantec Online Network for Advanced Response) and not as a direct virus/malware scan. It's possible that their signatures in the updates is correct, but they may have not removed your app from their SONAR algorithm.
ansgar's profile image ansgar posted 10 years ago Permalink
See here
[expired user #7375]'s profile image [expired user #7375] posted 10 years ago Permalink
I had already checked this thread. Also the link to the Symantec response is no longer a valid url. As i said, i have all of the updates for Norton 360.
ansgar's profile image ansgar posted 10 years ago Permalink
But I got a reply per mail from Norton - what can I do more about that?
[expired user #7375]'s profile image [expired user #7375] posted 10 years ago Permalink
Which version did you submit for the whitelist? It's possible that the code changes since have caused the triggering of the SONAR response. Version 8.1.0.4545 is safe according to Norton 360, but any version 4575 (which is the oldest I can download) and on show up as a possible threat. These versions are newer (by about 2 weeks) than the version you submitted.
ansgar's profile image ansgar posted 10 years ago Permalink
I am only submitting the official releases to those false positive virus detectors, not the nightly builds. So, it's the 8.1.0.4545 which I submitted to Norton.

I guess you can also whitelist the file yourself if you are using the nightly builds.

Please login to leave a reply, or register at first.