Symantec Proactive Threat Protection signals salamand.exe as threat
Posted: 17 Feb 2017, 11:17
Hello,
This morning, while running a file copy operation, Symantec Endpoint Protection function "Proactive Threat Protection" pops up and informs me that it has classified "salamand.exe" as a potential threat. It seems to base this on heuristics described like this:
"SONAR.AM.C!g10 is a heuristic detection designed to detect malware, adware, and potentially unwanted applications based on suspicious behaviors uncovered from cloud data."
Has anyone else encountered this?I guess this is probably a "false positive" of some kind. I have run the file through http://www.virustotal.com without any virus being detected. The weird thing is that the copy operation got stuck/hung on the same file twice and I had to "kill" it twice before that warning showed up. I don't know the significance of this (if any).
Best regards,
Johan
This morning, while running a file copy operation, Symantec Endpoint Protection function "Proactive Threat Protection" pops up and informs me that it has classified "salamand.exe" as a potential threat. It seems to base this on heuristics described like this:
"SONAR.AM.C!g10 is a heuristic detection designed to detect malware, adware, and potentially unwanted applications based on suspicious behaviors uncovered from cloud data."
Has anyone else encountered this?I guess this is probably a "false positive" of some kind. I have run the file through http://www.virustotal.com without any virus being detected. The weird thing is that the copy operation got stuck/hung on the same file twice and I had to "kill" it twice before that warning showed up. I don't know the significance of this (if any).
Best regards,
Johan