5 Replies Latest reply: Apr 30, 2013 7:37 AM by turingtest2
RMJFlack Level 1 Level 1 (0 points)

Today Norton AV blocked the backup stage of syncing my iPad.   This has not happened before.   Norton settings havent changed.   Id have to check but there likely have bene one or two Apps updated on the ipad from the apple store.

The presumption tho has to be that its something on the iPad, rather than Norton suddenly seeing ghosts.   How do i idnetify the culprit and remove it?

All I have to go on is the roaming...\mobilesync\backup...\snapshot\....  file name

 

The Apple call centre was no help beyond suggesti8ng that I turn Norton off!!!!   (I hope it was just a bad day for the gentleman in question, I really hope they arent trained to say that!).

 

I get very nervous when things suddnely happen for no apparent reason!


iPad 2, iOS 5.1.1
  • 1. Re: Norton AV suddenly blocked iPad backup for Heuristic Virus Bloodhound 115
    John Galt Level 8 Level 8 (36,425 points)

    Apple has no control over what Norton does. Clearly their product is preventing your iPad from working with iTunes as it is designed, hence Apple's recommendation to remove it.

     

    Try asking on a Symantec support forum:

     

    https://support.norton.com/sp/en/us/home/current/solutions/kb20080710133834EN_En dUserProfile_en_us

  • 2. Re: Norton AV suddenly blocked iPad backup for Heuristic Virus Bloodhound 115
    RMJFlack Level 1 Level 1 (0 points)

    My point is - why has this suddenly happended.  afik nothing has changed on my computer or my ipad (other than some apps from the Apple store updating, and of course everything in the Appel store is impeccable, right?).

     

    Obviously something has changed, computers do not do stuff like this at random.   My question is how do I found out what? 

     

    I will try the Symantec forum, but my guess is its on the ipad side of things.

     

    iPhone sync & backup has just completed Ok.  (So I can look at whats on the ipad that isnt on the iPhone).

     

    Thinking about it the only thing that may have changed on the computer may be iTunes, Id have to check if I went to the lates version before or after the previous sync / backup.

  • 3. Re: Norton AV suddenly blocked iPad backup for Heuristic Virus Bloodhound 115
    thomas_r. Level 7 Level 7 (27,985 points)

    Apple's suggestion is almost certainly the correct one. Norton has a particularly bad reputation on Macs, and its detection is not the best either. I don't know much about it from first-hand experience on Windows, but have heard some negative things. I would recommend using some different anti-virus software.

     

    Most likely, this is simply a false positive. Generally, anything identified as "heuristic" is not a certain diagnosis. Alternately, Bloodhound.Exploit.115 is an exploit of a very old vulnerability in Excel, so it's possible you have managed to get a malicious Excel file transferred onto your iPad. It would not be able to do anything to your iPad, and I doubt it's still capable of infecting your Windows machine.

  • 4. Re: Norton AV suddenly blocked iPad backup for Heuristic Virus Bloodhound 115
    RMJFlack Level 1 Level 1 (0 points)

    Thanks, Thomas.

    I agree, a false posiive is the most likely explanation.   I just try to keep security issues above the "most liely" level of confidence!

    FWIW Norton scan of my "laptop" (Del XPS 1730 requires laps of steel lol) has come up clean.

    At the risk of sounding like a broken record, my main concern is why this happened yesterday and not, say, last month (the last time I did a sync).   (No, I do not have auto update turned on in Norton, or anywhere else for that matter).   Its also curious that, supposedly, the number of reported occurrneces according to Norton is less than 5.

    I can not think of anything on either of my machines machine that would be so unique.   Not sure I have the stamina to tackle Symantec customer service (I have a marginal preference for root canal), otherwise it would be interesting to get some follow up on the report that was logged to Symantec by the scanner.

    Yes, I do have some spreadsheets shared between the devices (Excel in Windows and QuickOffice in iOS).

    Good to hear this particular virus (?) cant harm the iPad; and the laptop looksc clean anyway.

  • 5. Re: Norton AV suddenly blocked iPad backup for Heuristic Virus Bloodhound 115
    turingtest2 Level 8 Level 8 (46,625 points)

    iOS backups comprise multiple small files saving fragments of data from different parts of the device's filing system. Yesterday one of those fragments had a pattern of bits that matched a pattern that occurs in files that have a particular piece of viral code, that's all. Ideally the pattern that's being detected needs tweaking to reduce the chance of false positives, and with AV updates rolling out every day it may way that yesterday was the only time the data being backed up matched any of the patterns being searched for so no real mystery as to why it hasn't been detected before. Should you get a similar warning while backing up your device I would ignore it and let the operation continue, otherwise you are likely to have an incomplete backup set and you might find that it won't restore when you actually need it.

     

    tt2