Skip navigation

Norton AV suddenly blocked iPad backup for Heuristic Virus Bloodhound 115

535 Views 5 Replies Latest reply: Apr 30, 2013 7:37 AM by turingtest2 RSS
RMJFlack Level 1 Level 1 (0 points)
Currently Being Moderated
Apr 29, 2013 7:46 AM

Today Norton AV blocked the backup stage of syncing my iPad.   This has not happened before.   Norton settings havent changed.   Id have to check but there likely have bene one or two Apps updated on the ipad from the apple store.

The presumption tho has to be that its something on the iPad, rather than Norton suddenly seeing ghosts.   How do i idnetify the culprit and remove it?

All I have to go on is the roaming...\mobilesync\backup...\snapshot\....  file name


The Apple call centre was no help beyond suggesti8ng that I turn Norton off!!!!   (I hope it was just a bad day for the gentleman in question, I really hope they arent trained to say that!).


I get very nervous when things suddnely happen for no apparent reason!

iPad 2, iOS 5.1.1
  • John Galt Level 7 Level 7 (33,090 points)

    Apple has no control over what Norton does. Clearly their product is preventing your iPad from working with iTunes as it is designed, hence Apple's recommendation to remove it.


    Try asking on a Symantec support forum:


  • thomas_r. Level 7 Level 7 (26,960 points)

    Apple's suggestion is almost certainly the correct one. Norton has a particularly bad reputation on Macs, and its detection is not the best either. I don't know much about it from first-hand experience on Windows, but have heard some negative things. I would recommend using some different anti-virus software.


    Most likely, this is simply a false positive. Generally, anything identified as "heuristic" is not a certain diagnosis. Alternately, Bloodhound.Exploit.115 is an exploit of a very old vulnerability in Excel, so it's possible you have managed to get a malicious Excel file transferred onto your iPad. It would not be able to do anything to your iPad, and I doubt it's still capable of infecting your Windows machine.

  • turingtest2 Level 8 Level 8 (43,955 points)

    iOS backups comprise multiple small files saving fragments of data from different parts of the device's filing system. Yesterday one of those fragments had a pattern of bits that matched a pattern that occurs in files that have a particular piece of viral code, that's all. Ideally the pattern that's being detected needs tweaking to reduce the chance of false positives, and with AV updates rolling out every day it may way that yesterday was the only time the data being backed up matched any of the patterns being searched for so no real mystery as to why it hasn't been detected before. Should you get a similar warning while backing up your device I would ignore it and let the operation continue, otherwise you are likely to have an incomplete backup set and you might find that it won't restore when you actually need it.




More Like This

  • Retrieving data ...

Bookmarked By (0)


  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.