Norton Internet Security / Norton AntiVirus

[AnthonyD]

I am a software developer.  Two computers in our office have the exact same Norton Anti-Virus software with the exact same settings running on each.  These two computers are not connected in any way. 

I wonder why it is that when each of these two computers download the same software from the same internet location,  a False Postive for WS.Reputation occurs on one computer - resulting with its immediate removal,  while nothing at all occurs on the second computer - allowing full installation of the software without incident. 

Tony

[floplot Norton Fighter]

Hello AnthonyD

Welcome to the Norton Users Discussion Forum

For information about WS Reputation, please see this announcement.

http://community.norton.com/t5/Norton-Internet-Security-Norton/Clarification-on-WS-Reputation-1-dete...

[yogesh_mohan]

If the file is quarantined, please restore them from the Quarantine folder(History). Then run Liveupdate to get the latest definitions, and then run a Comprehesnive Scan. Check whether the virus scan detects it as a threat. If it is not detected as a threat, then you can ignore the detection from the Norton Insight Scan for time being. This may be corrected in the later updates.

Also, submit that file to Security Response for further analysis:

https://submit.symantec.com/dispute/insight/

Yogesh

[yogesh_mohan]

If the file is quarantined, please restore them from the Quarantine folder(History). Then run Liveupdate to get the latest definitions, and then run a Comprehesnive Scan. Check whether the virus scan detects it as a threat. If it is not detected as a threat, then you can ignore the detection from the Norton Insight Scan for time being. This may be corrected in the later updates.

Also, submit that file to Security Response for further analysis:

https://submit.symantec.com/dispute/insight/

Yogesh

[yogesh_mohan]

If the file is quarantined, please restore them from the Quarantine folder(History). Then run Liveupdate to get the latest definitions, and then run a Comprehesnive Scan. Check whether the virus scan detects it as a threat. If it is not detected as a threat, then you can ignore the detection from the Norton Insight Scan for time being. This may be corrected in the later updates.

Also, submit that file to Security Response for further analysis:

https://submit.symantec.com/dispute/insight/

Yogesh

[yogesh_mohan]

If the file is quarantined, please restore them from the Quarantine folder(History). Then run Liveupdate to get the latest definitions, and then run a Comprehesnive Scan. Check whether the virus scan detects it as a threat. If it is not detected as a threat, then you can ignore the detection from the Norton Insight Scan for time being. This may be corrected in the later updates.

Also, submit that file to Security Response for further analysis:

https://submit.symantec.com/dispute/insight/

Yogesh

[yogesh_mohan]

If the file is quarantined, please restore them from the Quarantine folder(History). Then run Liveupdate to get the latest definitions, and then run a Comprehesnive Scan. Check whether the virus scan detects it as a threat. If it is not detected as a threat, then you can ignore the detection from the Norton Insight Scan for time being. This may be corrected in the later updates.

Also, submit that file to Security Response for further analysis:

https://submit.symantec.com/dispute/insight/

Yogesh

[yogesh_mohan]

If the file is quarantined, please restore them from the Quarantine folder(History). Then run Liveupdate to get the latest definitions, and then run a Comprehesnive Scan. Check whether the virus scan detects it as a threat. If it is not detected as a threat, then you can ignore the detection from the Norton Insight Scan for time being. This may be corrected in the later updates.

Also, submit that file to Security Response for further analysis:

https://submit.symantec.com/dispute/insight/

Yogesh

[AnthonyD]

I didn't request info about WS.Reuptation.  The Internet is Full of complaints and other info on how Norton is producing WS.Reputation False positives and instructions on what we need to do to correct Norton's errors.  

My question must have been unclear to some.  Please let me try again by approaching my question in a different way.

There are two computers in the same room.

Each are identical computers.

Both have the same Norton Ant-Virus running.

Computer One downloads software from the internet and receives a False positve for WS Reputation.

Computer Two is simultaneously downloading the same software as Computer One - and from the same Indternet location -  but Computer Two does not receive Any notice of any virus activity (including WS.Reputation) from Norton. 

Norton states the software download to computer one is NOT safe and removes it automatically.

Noton states the same software download to computer two  IS safe and allows normal installation. 

What's unsafe on one is safe on another. 

One might think that when Norton produced the False positive for WS.Reputation on computer one,  that a False positive would also have been automatically produced on computer two.  But that ddn't happen.  The conclusion could be that Norton results are inconsistent from computer to computer. 

What is causing Norton inconsistency?   

[Venkat_J]

Hey AnthonyD,

Welcome to the community!

Are you running the same version of Norton AntiVirus in both the computers. Click Help and Support > About to check if they are of the same version.

Thanks,

Venkat Jammalamadugu
Norton Forums Moderator
Consumer Products and Solutions
Symantec Corporation

[AnthonyD]

As I said,  the two computers are identical - both are running Norton Anti-Virus.  The versions are the same.  The box color and size is the same. 

Ever since my question was first posted, it has remained unaddressed..  Some might say that most people are not likely to spend their time combing  through unrelated replies for an answer.  The majority of people will just give up and go away.

It could also appear that Norton sympathizers may be quick to try and confuse readers and cloud issues - in the apparent attempt to shift Norton's responsibility back to the consumer.   

So whatya say I just give up and go away.

Thanks Norton.

[mdturner]

---

AnthonyD wrote:

As I said,  the two computers are identical - both are running Norton Anti-Virus.  The versions are the same.  The box color and size is the same. 

Ever since my question was first posted, it has remained unaddressed..  Some might say that most people are not likely to spend their time combing  through unrelated replies for an answer.  The majority of people will just give up and go away.

It could also appear that Norton sympathizers may be quick to try and confuse readers and cloud issues - in the apparent attempt to shift Norton's responsibility back to the consumer.   

So whatya say I just give up and go away.

Thanks Norton.

---

Hi AnthonyD

Your comments are little harsh, especially since your post is less than 24 hours old. Except for the names in bright Red, the people responding to you are all users, just like you, and they give of their spare time to try to help other users resolve their Norton issues.

Please do not rush to judgement, give the forum users some time to ask pertinent questions and provide an answer to your issue if they are able to.

Thanks

[Tony_Weiss Administrator]

Hi AnthonyD,

Just to be clear regarding your identical systems:

1) Have the same operating system and service pack? Which one?

2) Have the same hardware specs? Could you provide those?

3) Have all of the same Software installed, including the versions? What are they and their versions?

4) Norton AntiVirus on both machines has all of the latest updates applied? Which version, and which virus definition update was last applied? You mention the box colors are the same, however there are updates that you receive through LiveUpdate that should have been applied. This would change the version number and apply fixes and updates to the product.

5) The same file was downloaded to both machines? What file was downloaded? I can understand if you can't reveal all of the information, but whatever you can provide is appreciated.

6) The file was downloaded on both machines at the exact same time? Time is a factor with Reputation. Over time, file reputation can fluctuate. As we receive more information about a file, the status of it may change.

I apologize for the many questions; I want to be sure we're all clear on the circumstances surrounding the issue. Thanks!

[Tony_Weiss Administrator]

Sorry, just a few more questions that might help us figure out the problem:

7) What is the browser and version you used to download the file?

8) What are the specific attributes of the file that is having inconsistent detection? On both machines, please do the following:

a) Right-Click the downloaded file (you may need to restore the quarantined one first)

b) select "Norton File Insight"

c) A File Insight window appears. In the upper-right corner of the window that appears, click the plus sign. This will copy the information on this window.

d) Open Notepad, and Paste into the notepad.

e) Copy and Paste this information into the forums (or if you feel it is sensitive information, send it to me in a Private Message, the envelope in the upper-right corner of the forums)

I need the information for #8 for the file downloaded on BOTH systems. Please indicate which attributes are from which machine. Thanks!

[AnthonyD]

Thanks for muddying the question even more.  Keep up the good diversion techniques.