Norton thinks Cursor operations and files are virus

Bug Reports
1

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

norton seems to think cursor operations is a virus and deleates the files , destroying my app , its also blocking the ability to use localhost and ports to look at builds. is there a fix for this . ive tried adding cursor to the white list etc does not work seems to get triggered when is building an deploying the app , but might also be deleating the files as cursor makes them as lots of stuff stopped working and then the agent told me files had been moved or delated by user

Steps to Reproduce

Seems to do it every time the app builds the final app and deploys. As ui was not not working . So i ask cursor to fix it the norton then comes up saying it deleated a virus and something to do with powershell as it says blocked powershell exe commandline detection see attactched images

Expected Behavior

should make files and code and compile with out norton or virus checkers thinging its a virus or bad .

Screenshots / Screen Recordings

Screenshot 2025-08-20 141451.png
Screenshot 2025-08-20 141451.png880×223 17 KB

Operating System

Windows 10/11

Current Cursor Version (Menu → About Cursor → Copy)

Version: 1.4.5 (user setup)
VSCode Version: 1.99.3
Commit: af58d92614edb1f72bdd756615d131bf8dfa5290
Date: 2025-08-13T02:08:56.371Z
Electron: 34.5.8
Chromium: 132.0.6834.210
Node.js: 20.19.1
V8: 13.2.152.41-electron.0
OS: Windows_NT x64 10.0.26100

2

hi @oly99 and welcome to Cursor Forum.

Thank you for the bug report and explaining the details.

As this is not strictly a bug from Cursor we will not be able to change their detection from our side.

Could you reach out to Norton and ask them to check this issue?

3

shouldnt cursor installation add its folders etc to the antivirus exclutions though. and some other thing that might stop it working . there is some sort of powershell thing its blocking powershell.exe for command line detection IDP.HELU.PSE46

4

As there are multiple OS versions Cursor runs on and many antivirus providers, this is a user choice and interfering with antivirus software might cause them to completely block Cursor.

From time to time antivirus heuristics make false positive detection and this is usually corrected by the antivirus provider.

5

i am seeing the same (windows 11)