Skip to main content

file windows.sig - detected as trojan by Norton Antivirus

Thread needs solution

Hi,

today, I started my computer, right after login, Norton informed me about action.

After checking what was this about, I discovered that Norton found a Trojan in Acronis folder, the exact path was:

c:\ProgramData\Acronis\NGMP\1.0.2748.354\avc\windows.sig

Norton removed the file.

Is it a false detection, or is it possible this file was indeed infected?

 

Attachment Size
detection.jpg 277.8 KB
path.jpg 44.23 KB
0 Users found this helpful

Filip, welcome to these public User Forums.

What version of Acronis software are you running?  Is it ACPHO or ATI 2021, and do you have the Cyber Protection feature enabled in that software?

The file detected by Norton is a part of the malware detection signatures used by Acronis for its integrated virus detection processes, so is a false negative.

Note: if you are using Norton as your main security provider, then you should not have Acronis Cyber Protection running at the same time as this can cause conflicts as well as impacting on system performance.  If you have ACPHO then you can do a Selective Install and elect not to install those Protection features.

See  Acronis Cyber Protect Home Office: how to install | Knowledge Base

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 2
Comments: 1727

Hello!

Please exclude the agent folders/executables from the A.Virus: https://kb.acronis.com/content/36429

Acronis will not activate its real-time anti-malware protection feature, if Windows Security Center reports that another antivirus is currently active. That ensures that we will not initiate any conflict between two simultaneously running antivirus solutions. To eliminate possibility of that conflict from the other antivirus part, we recommend that you leave only Acronis product and uninstall the third-party antivirus. https://kb.acronis.com/content/69488

Thanks in advance!