Norton Internet Security / Norton AntiVirus

[jamason56]

Hugh - I did run SafeWeb on the mrn.org.uk site originally (after downloading the first file). It showed the site was OK/Safe. It currently shows that status as well. I wasn't sure how you checked the actually file, so I took a chance and entered the name of the file "FlyingScotsman-DoubleclickToInstal.exe" in the 'is this site safe?' box. It showed 'This site has not been tested yet.' Shouldn't SafeWeb tell you that you've entered an invalid website name instead of saying 'this site has not been tested yet. It seems as if it didn't realize I put the name of an executable in the box where the address of a website should be entered. Strange.

[jamason56]

I certainly can understand this logic. A couple of questions about it. How does Norton determine the file is actually safe? What procedure is used and how long does it take before a file is given a clean bill of health? As for the operation of Insight, I'd prefer that I be given the option of determining whether a file is safe or not before Norton stashes it in Quarantine. I don't mind being protected from myself, but as I originally mentioned, I didn't know that the file was in quarantine and that it could be retreived if you knew the process to retrieve it. I know it's a matter of learning the software, but I'd like the software to tell me it's doing something like this before it does it.

Again, I do understand why Insight would have to be cautious. Just trying to find the right balance between giving the user options and protecting the user from themselves.

[huwyngr Norton Fighter]

John,

I have asked around and I gather that there is additional information is available in this post::

 http://community.norton.com/t5/Norton-Internet-Sec​urity-Norton/Clarification-on-WS-Reputation-1-det... 

which certainly gives a lot of useful background.

It seems to me that when they want to flag something just because there are not many users (and bearing in mind that Insight said to me that the website has not been checked) they should put up a message before quarantining the file giving the reason and letting the user decide. This would be more user friendly than making him recover the file.

FWIW

[jamason56]

Hugh,

Thanks for doing the 'heavy lifting' and digging out this info. I read up on the background information. I agree with your idea about how to handle a new file.

After reading this background info I'd say I don't particularly care for how Norton has their Insight program set up. A new file is, by default, considered a threat simply because it is a new file. That is, unless the developer has specifically submitted the file to Norton for white-listing. Norton says this procedure can take several weeks. They also says there is no guarentee of preventing false positives. However, they also say that if a user submits a file for OK, that they monitor the submissions 24 hours a day. As I mentioned, when I submitted a file for FP earlier this week it took numerous email messages back-and-forth between me and the Insight team, and it took several days. Not exactly user friendly. I'd like to consider myself computer savvy and I don't really mind helping out like this. But what is a 'regular' user to do? It's frustrating.

I truly understand what Norton is trying to do here... but I don't think they truly know how to do it properly. Lots of confusion... I hope someone from Norton is reading this thread.

Thanks again,

John

[jamason56]

Hugh,

I just went back through this thread to review it. I noticed on the screenshot you submitted that you have 10 hard drives in your system! What the heck are you doing with 10 hard drives? <smile>

John

[huwyngr Norton Fighter]

Let's see if Norton come along with any comments.

[huwyngr Norton Fighter]

---

jamason56 wrote:

Hugh,

I just went back through this thread to review it. I noticed on the screenshot you submitted that you have 10 hard drives in your system! What the heck are you doing with 10 hard drives? <smile>

John

---

I don't do anything with them -- that's what I pay Windows for .... <g>

If you look at the drive labels -- I personalize them so that even if the drive letters get shuffled around I know which is which -- There are 2 SATA drives which are inside the PC and one partitioned into 3 logical drives and the other into 4. And there is an external USB Seagate drive also partitioned into 3 logical drives.

The Seagate is storage -- data archives, file downloads, drive images, photos etc.

SATA1 has XP on P1 and SATA2 has WIN 7 Home Premium 32bit on its P1 as well as WIN 7 Enterprise 64 bit on P3 as a testbed using the free download that is still available until April 29 2011 I see it now says.

The multiboot is set up using the Windows own system although I use a front end GUI that is easier to understand.

The old PC had 3 Hard drives in it all partitioned ...... plus two externals ....