BAS worker.exe quarantined by Symantec

[pporlan_click]

Hi,
we have an small issue with BAS and antivirus:

Short description:
BAS file "worker.exe" is quarantined by antivirus.

Detailed bug description(optionally):
As shown in screenshots below, Symantec Endpoint detects "SONAR.Heuristic.159" and quarantines the file "worker.exe", it is possibly a false positive (it happened us a few months ago with our own application and we had to submit it to get whitelisted https://submit.symantec.com/false_positive/)

In other systems we have with other AV software (Windows Defender, ESET Internet Security) everything works fine.

Screenshot(s).

BAS version.
20.8.5

OS version.
Windows 7

If we can help you with any other information or action, please tell, us.

Kind regards

Pedro Porlán

[support]

@pporlan_click worker.exe contains a lot of low level techniques, especially when it comes to tunneling. So this is possible.

[sharkwhite]

or put exception or disable antvirus is false positive