Norton incorrectly alerts that a file is infected, or a program or website is suspicious

A false positive occurs when Norton incorrectly alerts that a file is infected, or a program or website is suspicious. Common indicators of a false positive are:

  • Norton detects a threat in a file that you believe is unlikely to be infected (for example, files with extensions such as, *.txt, *.dbf, *.log, *.hlp).

  • Norton alerts that a file or program developed and created by you or a legitimate company is suspicious, or is a threat

  • Norton indicates that a legitimate website is malicious

  • Norton blocks downloading a file as suspicious

How to report a false positive?

  • Before submitting a false positive, make sure that Norton has the latest definition updates. Run LiveUpdate to install all the available updates for Norton and then run a Full system scan.

    If the false positive still occurs with the latest definitions, report it to Symantec. The link to submit a false positive differs based on the exact detection, or the alert you receive.

    Report a Suspected Erroneous Detection (False Positive)

Need more help?

Thank you!

Thank you for using Norton Support.

< Back

Was this information helpful?

DOCID: kb20100222230832EN_EndUserProfile_en_us
Operating System: Windows
Last modified: 10/23/2017