Norton Internet Security / Norton AntiVirus

[cgoldman]

Easternokie

I do not doubt that Sonar is deleted your programs. However, can you confirm that when you turn off Sonar Advanced Mode that the problem does not arise? Can you also please confirm that when you recover the file that is quarantined that Sonar does not attempt a 2nd or subsequent time to delete it, on the presumption that you take that option during recovery?

Lastly, although this exercise of recovery is annoying, do you agree that this is a workaround at this time?

thank you

[bjm_]

Hi kalahari

Please clarify your experience with MSE for me... you wrote: When I installed MS Security Essentials today, it gave me a serious warning about AsteriskLogger --- it did not just delete it without giving me any choice in the matter.  I chose not to install it.

---

Do you know at what stage of the potential download / install of AsteriskLogger that MSE offered you the serious warning.   Did MSE permit the download and then from quarantine offer you the option not to install.  Since you wrote "it did not just delete it [...]" ....that sounds like AsteriskLogger was resident on your System somewhere waiting for you to act on the warning.   Maybe you feel SONAR is acting in haste or too aggressively.  Maybe it is...but, the alternative to allow potential malware to download and be quarantined to be removed at your request is reasonable only if all malware could be easily / completely / cleaned / removed from quarantine.   As you know not all malware goes quietly into the night.  I respectfully offer this info Here

I do not disagree with your assessment of SONAR.  I respectfully suggest Protecting the PC against Malware infection in the first place is always better than subsequently attempting to clean up the chaos created by an infection.

Regards

bjm_

[kalahari]

bjm_

Sorry, don't remember the exact sequence and have been unable to recreate -- maybe the MS product is remembering my earlier selections somewhere so I can't get the errors for this particular app to pop up again.  I think it quarantined AsteriskLogger and I could remove it from quarantine if I really wanted to.

AsteriskLogger (and all the rest of the NirSoft utilities) were in a single zip file that I had downloaded from NirSoft while NIS 2010 was installed and running.  So NIS 2010 allowed the download of the zip file with all of these utilities.  It subsequently declared them (after unzipping) to be Security Risks and then deleted them. (BTW, we are giving way too much attention to AsteriskLogger. That has the potential of mischief; I was concerned about others that were not for retrieving passwords but NIS said had "Hacktool".)

I think I should leave this thread for the original poster.  It was not my intention to hijack it.

Message Edited by kalahari on 11-01-2009 04:36 PM

[Easternokie]

SONAR deletes it only every time it is recompiled.   I have sent in a sample several months ago, never a reply from Norton.

[KLMystic]

Sonar is a big headache for those who are not tech savy and indeed I find the problem of deleting files that we hve asked to be restored reoccurring again and again ! Hope Norton/Symnatec can look into it!

[bjm_]

Hi kalahari et al,

Thank you for your reply and additional comments.  The time between posts and your reply has forced me to re-think my perceptions.   I'm sure all user's desire a better mouse trap.  A better mouse trap always breeds a smarter mouse.   The focus to trap the smarter mouse has evolved out of necessity to a focus on blocking the smarter mouse from getting anywhere near the mouse trap.   To that end... Norton built a mouse trap with Quorum ~ Download Insight ~ Intrusion Prevention System ~ Norton Safe Web and SONAR 2.    Does this new & improved mouser need some tweaking.  Yes!   To that end...I have to believe the Norton's mouser will be tweak'd.  Will the tweak'd Norton mouser meet user expectations.  Time will tell.  For now I offer this mouser guide for your viewing pleasure.

Regards to all,

bjm_ 

[kalahari]

KLMystic,

You said "Sonar is a big headache for those that are not tech savvy..."   I'm saying it's a problem for tech savvy people like me :)  The deleting of files (or the quarantining of files) without the ability to override is a problem though.

bjm_,

Thanks for your response.  I have done some more thinking today too.  This morning, I uninstalled NIS 2010 and installed MS's product.  I have now uninstalled MS's product and re-installed NIS 2010.  If there is so much support for the NIS product on this forum, I think that it may make it worth working through my percieved "issues and problems" with it.

I will definitely take a look at the mouser guide that you provided a link too.  Thanks

[bjm_]

Hello kalahari

Wow!  You had a busy day.  Thought we lost ya....Happy to hear your back (for now).   This Forum is really special ... you are a valued tech savvy member of the Community.   Remember, it's not just a Security product... it's an adventure.

The Forum has extended hours....we never close!   

Thanks and regards

bjm_

[Brubaker]

---

bjm_ wrote:

Hello kalahari

Wow!  You had a busy day.  Thought we lost ya....Happy to hear your back (for now).   This Forum is really special ... you are a valued tech savvy member of the Community.   Remember, it's not just a Security product... it's an adventure.

The Forum has extended hours....we never close!   

Thanks and regards

bjm_

---

bjm_,

With a spiel like that, you ought to be getting paid!!

[kalahari]

---

Brubaker wrote:

---

bjm_ wrote:

Hello kalahari

Wow!  You had a busy day.  Thought we lost ya....Happy to hear your back (for now).   This Forum is really special ... you are a valued tech savvy member of the Community.   Remember, it's not just a Security product... it's an adventure.

The Forum has extended hours....we never close!   

Thanks and regards

bjm_

---

bjm_,

With a spiel like that, you ought to be getting paid!!

---

ROFL