Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious

A false positive occurs when your Norton product incorrectly alerts that a file is infected, or a program or website is suspicious. Common indicators of a false positive are:

  • Norton detects a threat in a file that you believe is unlikely to be infected (for example, files with extensions such as, *.txt, *.dbf, *.log, *.hlp).

  • Norton alerts that a file or program developed and created by you or a legitimate company is suspicious, or is a threat

  • Norton indicates that a legitimate website is malicious

  • Norton blocks downloading a file as suspicious

Report a false positive

Before submitting a false positive, make sure that your Norton product has the latest definition updates. Run LiveUpdate to install all the available updates for your Norton product and then run a Full Scan.

If the false positive still occurs with the latest definitions, report it to us. The link to submit a false positive differs based on the exact detection, or the alert you receive.

To know more, read Report a Suspected Erroneous Detection (False Positive) to Norton .

What to do after you submit a false positive?

The submitted file will be analyzed for any potential false-positive detections and the updated definitions will be released to address the issue within 48 hours. In the mean time, you can try updating the definitions and scan the incorrectly detected file or application at frequent intervals.

Perform the following steps only if your business is getting impacted, or if you are certain that the file is safe, or if you are a developer who created the file.

Turn off Download Intelligence

  1. Open your Norton device security product.

  2. On the left pane, click Security.

  3. Navigate to Advanced Security > Web > Safe Web.

  4. In the Safe Web window, on the Settings tab, click the slider next to Download Intelligence to turn it Off.

  5. In the Security Request dialog box, in the Select the duration drop-down list, select the duration that you want to turn off Download Insight for and then click OK.

  6. Click Close.

    If you are certain that the file is good, then you can exclude the files or folders from being scanned.

Exclude files or folders from scan on Windows

If you are certain that the file is good, then you can exclude the files or folders from being scanned.

  1. Open your Norton device security product.

  2. On the left pane, click Security.

  3. Navigate to Advanced Security > Computer > Antivirus.

  4. In the Antivirus window, on the Exclusions tab, click Add.

  5. Browse for and select the folders or files that you want to exclude from the scan, and then click Save.

Exclude files or folders from scan on Mac

  1. Open your Norton device security product.

  2. On the left pane, click Security.

  3. In the Security dashboard, in the Scans tile, click Open.

  4. Click the Exclusions tab and click Add exclusion.

  5. Select the files or folders you want to exclude from the scan and click Open.

  6. If you want to remove an exclusion, in the Exclusions window, hover your cursor over the relevant exclusion file and then click the delete 'X' icon.

I found this information helpful.

Yes No

Help us improve this solution.

Thank you for helping to improve this experience.

What would you like to do now?

Browse for solutions, search the Norton Community, or Contact Us.

DOCID: kb20100222230832EN
Operating System: Mac;Windows
Last modified: 12/10/2024