Roon RAAT software quarantined by Norton causing audio devices to disappear (ref#O56RIF)

[6x6cms]

What best describes your playback issue?

· Music doesn't start when I press "Play"

What type of Zone is affected by this problem?

· *All of my Zones* are affected.

Does the issue affect all file formats?

· The issue affects *multiple/all* file formats.

Does the issue happen with local library music, streaming service music, or both?

· *Both streaming and local* *library* music are affected.

Do you encounter any playback errors with the "System Output" Zone?

· The System Output has the same problem as my other Zone.

Is your RoonServer machine running MacOS 15 Sequoia or above?

· I still can't see my endpoints as available Zones.

Do you have a complex network setup?

· Both the device and RoonServer are connecting to a *single router*

Please try rebooting your router.

· No, I'm still having trouble

Do you have an approximate timestamp of when the issue last occurred?

· 05/13/25

What are the make and model of the affected audio device(s) and the connection type?

· USB advanced audio device

Describe the issue

Roon RAAT software update quarantined by Norton anti-virus. I can no longer see my audio devices.

Describe your network setup

connected by eero router and ethernet cables

[fietser]

Norton blocking Roon due to IDP.generic infection message (ref#2XXWYP)

What’s happening? · Other How can we help? · None of the above Other options · My Roon software won't start up Describe the issue Norton is blocking Roon after update. Roonappliance.exe infected with IDP.generic is the message Describe your network setup wifi

Maybe this Will help.

[vadim]

Hello @6x6cms

The issue you’re encountering is due to a false positive detection by Norton Antivirus. The IDP.Generic flag is a generic heuristic used by Norton and other antivirus software to identify potentially suspicious behavior, but it does not necessarily mean the file is malicious.

In this case, RoonAppliance.exe from Roon version 2.51, build 1534 is safe, and this detection is a mistake. The Roon team regularly scans all releases for malware before distribution. We’ve seen similar reports in the past with other antivirus software as well, especially when new builds are released.

---

What you can do:

1. Restore the file from quarantine in Norton.
2. Add an exception in Norton for RoonAppliance.exe or the entire Roon installation folder.
3. Report it as a false positive to Norton via their official False Positive Submission Form.