My Norton product incorrectly alerts that a file is infected, or a program or website is suspicious

A false positive occurs when your Norton product incorrectly alerts that a file is infected, or a program or website is suspicious. Common indicators of a false positive are:

  • Your Norton product detects a threat in a file that you believe is unlikely to be infected (for example, files with extensions such as, *.txt, *.dbf, *.log, *.hlp).

  • Your Norton product alerts that a file or program developed and created by you or a legitimate company is suspicious, or is a threat

  • Your Norton product indicates that a legitimate website is malicious

  • Your Norton product blocks downloading a file as suspicious

How to report a false positive?

  • Before submitting a false positive, make sure that your Norton product has the latest definition updates. Run LiveUpdate to install all the available updates for your Norton product and then run a Full system scan.

    If the false positive still occurs with the latest definitions, report it to Symantec. The link to submit a false positive differs based on the exact detection, or the alert you receive.

    Report a Suspected Erroneous Detection (False Positive)

Thank you!

Thank you for using Norton Support.

< Back

Was this information helpful?

DOCID: kb20100222230832EN_EndUserProfile_en_us
Operating System: Windows
Last modified: 05/31/2016