Norton SONAR protection turns off Exploit Protection

Document created by asmith Employee on Jan 23, 2018Last modified by jyamada on Jan 23, 2019
Version 6Show Document
  • View in full screen mode

We've determined SONAR protection, a feature found in Norton home productsconflicts with Malwarebytes for Windows' Exploit Protection module.  If both features are enabled on the same computer, SONAR protection turns off Exploit Protection.


Image of Exploit Protection appearing as Off in Malwarebytes Premium.



Add the files below to your Norton home product's Auto-Protect, SONAR and Download Intelligence Detection exclusions.  For instructions, refer to Norton's article Exclude security threats from scanning.  Restart the computer when you are finished adding the files below.


  • C:\Windows\system32\Drivers\farflt.sys
  • C:\Windows\System32\drivers\mbae64.sys
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\System32\drivers\MBAMChameleon.sys
  • C:\Windows\System32\drivers\MBAMSwissArmy.sys
  • C:\Windows\System32\drivers\mwac.sys
  • C:\Program Files\Malwarebytes\Anti-Malware


When the files above are added to your Norton home product's exclusions, Norton does not scan or interfere with the file and its operations.


Additional information