Symantec Quarantine of NSIS files

Symantec/Norton AntiVirus programs are quarantining some NSIS EXEs before they are even executed. The alleged security risk is VirusBurst:


I've contacted Symantec about this. Just posting to let others know in case their users report this.

Yep, I'm getting the same problem. I can't wait for the backlash of users saying I've sending virus-infected setup files!!!

I've found that NAV is picking up on any file compressed using lzma (not lzma_solid). In fact, it quarantines the lzma stub as well on my system.

No doubt another "shoot the messenger" false positive.

Try updating your defs throughout the day to see if this is resolved. I'm told it will be.

Just tested and seems to be okay now. dienjd - can you confirm that at your end as well?

Yes, updated definitions they released yesterday seemed to fix the problem.