Norton marks System Update's UTS.exe as Threat and removes

[hyde]

I wanted to update my system software to new version, but Norton just removes is claiming it is a high risk file.

I just had to manually exclude it and mark it safe & rerun.

http://gyazo.com/8a09b5dcc90ab04dcb7816d85fe92454.png

[RealBlackStuff]

And yet another reason to continue my dislike for Norton/Symantec...

[hyde]

The funny thing is (and the main reason why I posted this topic) Norton 30 day comes bundled with Thinkpad eventhough I did not ask for any antivirus.
However, surprisingly Norton works pretty fast, it is not what it used to be. I still have 2 years left on my Kaspersky license in my other laptop. I also know a lot people stopped using any kind of antivirus altogether and went on to keeping Microsoft's own Security Essentials. Can I depend on it with my heavy work e-mail usage? I don't know.. some of the reports are not really that impressive.
What do you use?

[ozzymud]

Notice that it is flagged for suspicious activity... Most virus engines have this, it didn't say you have a virus, just that the app was doing something suspicious. It is up to you to decide if this app is something you installed/know about.

Virus engines will routinely flag:
keygens/viewers: majicjellybean, i've also had scanners flag really old hacks to remove codewheel protection from OLD games that I no longer have said wheel for
key loggers: most will flag
nocd cracks: had a few flag
joke apps: screen flippers, the cd coke holder, mouse to gun... http://www.robrob8.com/pranks/
UPX packed exe/dll: I compressed several exe/dll on a flash drive (PortableApps), and had them flagged.
Some utility software: nircmd comes to mind... see the second post here: http://www.bleepingcomputer.com/forums/topic200088.html

quietman7 gives a really nice explanation. My computer doesn't run a resident anti-virus. I manually scan files I get from dubious places. Everyone else in the house uses Avast. When I get a suspicious file, i use http://virusscan.jotti.org/en to scan it. Common sense plays a big role in this setup. (I install Avast custom, ONLY the "File Shield" is installed. All virus will become a "file" even if a temp file)

If you must run a resident av, you can go into settings and normally disable a lot of the "protection"... namely turn heuristics down a notch(depends on engine here, some are better then others), turn off PUP(potentially unwanted program), turn off checking inside archives(zip/rar scanning is often a big load anyway and if you extract/run a file from inside one your scanner should catch it then anyways. or if manual scanner, you scan when you extract it.)

[hyde]

Hi Ozzy,
Thanks for the information, I don't have the luxury of being able to run the virus scan on selective files. As you know most of the time e-mails spread worms and junk the moment you open it, with no attachment. Most of the time server should catch them, but there are times it doesn't and luckily having a antivirus running helps catch those.

Regarding the norton's behavior; no, it doesn't just warn me. It blocks the file and quarantines, almost as good as deleted.. Unless you know how to navigate through Norton's interface, it is going to be nearly impossible to find out what happened to the file, or if there is even a way to retrieve it. Once you close that pop up, you are on your own. Therefore a novice computer user would not be able to access to these deep menus and be able to run a perfectly fine piece of software that works to update system.

It is probably something Lenovo should review, especially when they promote norton.

[GomJabbar]

I use Avira AntiVir Premium. I am generally pleased with it, but it doesn't like Lenovo's "Business in a Box" and flags it as a Trojan. Don't want it anyway.

[hyde]

Why hasn't lenovo done something about these? Even small time developers get in touch with antivirus companies to get their false alarms removed.

[buzzlight]

Folks,

I just gave up on Norton and uninstalled it on my thinkpad and Lenovo desktop. The reasons are similar to the first post, and also because of real system performance issues. Avast!, AVG, and MSE (Microsoft Security Essentials) and other anti-virus packages are just fine when combined with a good firewall (windows or otherwise).

That's my advice...just get rid of Norton.

[hyde]

Which version of Norton were you running?

[buzzlight]

Sorry for the delay(!). I was using the latest version of the Norton Internet Security Suite, with three licenses. I had it installed on three systems, two desktops and a laptop. I eventually had problems on all three platforms which forced uninstalls. When I consulted with my system support people at work, they've given up on Norton for the same reasons. They recommended MSE in combination with windows firewall. My systems have run better and faster since!

[hyde]

I agree that internet security extends itself too deep into the system, including the web browser. This is why I disabled most of the browser related features. It seems to run just fine ever since. And if it wasn't free after rebate, I probably wouldn't have bought.

[Temetka]

I use Microsoft Security Essentials.

Oh and I have a brain and practice 2 things which greatly help.

1. Defense in Depth
2. Informed Computing.

Both are far more effective at stopping viruses and malware than any AV can do.

[hyde]

Does everyone in your office practice the same precautions? If not, then I am afraid it is not going to work.

[sir_synthsalot]

Will the Norton hate ever end?

[RealBlackStuff]

Once enough people hate Norton/Symantec and stop buying their junk, the problem will sort itself by the company going out of business (wishful thinking ).