"Infostealer.Napolar" detected by Norton...

[brutons]

Hello All - hope you're well.

Just returning with what seems like perhaps a false positive, but would very much welcome your experience to confirm this to be the case.  Norton Internet Security came up with a threat identified as "Infostealer.Napolar" ("low [technical] threat"), listing 4x tmp files apparently derived from MBAM.  Have attached a screenshot.

I'd welcome any input - apologies if I've missed a thread already identifying this.

Best wishes and thanks

[shadowwar]

These temp files are created by Norton itself in our directory. We have tried in the past to address this with norton but have been unsuccessful.

The files actually contain what looks to be norton definitions.

So basically it detects its own def files.

It is a fp on part of norton though as its only detecting its own defs and not actual malware.

 

[brutons]

Thanks very much for this, Rich.  I kind of suspected the same.

As always, I really appreciate the speed and efficiency of the Forum's support

[shadowwar]

No problem. There are multiple posts with the same issue on the forum. We even had some of our users report it to norton but no changes so far.

[brutons]

Thanks again, let's hope Norton take note!