Norton Internet Security / Norton AntiVirus

[IOB_Ernest]

I am having the same problem - files that I believe to be clean (and from trusted sources) get tagged as "WS.Reputation.1" when I right click on them for a scan before opening.  So far, this has happened with WMV and Excel files.  I can perform a full system scan though and encounter no problems.  This has only started happening recently.  Please advise...

Thanks!

[Clio]

Same problem here - usually when I do a InsightNetzwerk-Scan of .avi, .srt and .rar files.

[vicky22]

Additional info:

This began yesterday 5/6/10 around 10:00 pm CST.

I have Internet Explorer, I think version 6 or 7.

I uploaded a .rar file that Norton analyzed as infected to VirusTotal, and it detected nothing.

It seems unlikely given the evidence, but could this be an actual virus that is affecting only certain types of files?

Or is it that Norton is incorrectly identifying these files as being "infected"?

That's what I would really like to know!

If this is a virus/threat, I would really like to know what kind. All the Insight Network scan tells me is that it is an "infected file".

So, what kind?  Spyware, malware, virus, worm.....?

And if that were the case, why is it that I can extract and use the "infected" .rar files without any issues? They go straight to my game as they always did, and the game runs normally.

Plus, full system scan never catches or quarantines the .rar files, only the Insight Network scan does.

Does anyone believe this could be an actual virus and/or threat?

[e1scd]

I have noticed the same problem.  Downloads of compressed files from legitimate sources are identified as being infected with WS.Reputation.1 and subsequently deleted.  I typically use "download statusbar" add-on in FireFox 3.6 and have this configured to automatically scan all downloads with NAV17.6.0.32\navw32.exe. As soon as the download is completed, NAV scans the compressed file,  identifies it as infected and deletes the file.  The problem seemed to arise with a program update from 5/5/2010 or 5/6/2010.

My systems are running Windows 7 Ultimate 64-bit using NIS2010 for AV protection.  Other malware programs (Iobit 360, PC Tools Spyware Doctor/Threatfire, VirusTotal) do not identify any type of risk in the same files.

[u2zoostation]

This would be a very helpful problem to resolve.  I have the same problem only when I initiate the scan and receive the WS.Reputation.1 message and immediately quarantines the files and .RAR bundles.  Retrospectively, I have scanned files that I created and other files that were previously scanned with no issues and are now quarantined.

Please advise.

[conancpa]

I have the same problem with any download from both Firefox and IE8.  Also, I tested it by scanning previously downloaded files.  These files were scanned at the time of the original download and the scan at that time showed no problems.  If I scan them now they are treated as infected with WS.Reputation1 and quarantined.

[Cyron]

As I ave stated in my first post on page 1 this only happens when I use Internet Explorer but not with Google Chrome. So my advice is: try another web browser and let IE alone until this issue is solved by Symantec.

[vicky22]

Well in my case this only happens with .rar files that were downloaded on 5/7 and 5/6.

It appears that .rar files from before these dates come up with a clean slate when Norton individually analyzes them.

[mattsegers]

Same problem here.

Just out of curiosity, how many of you have "scan compressed files" as "on" in your settings? Maybe why it picks it up when you do a custom, right-click scan, and not when you do the full scan. I haven't, however, tested this myself.

*edited out spelling error

[mgbmike]

Noticed this problem this morning. Any *.zip files downloaded with Firefox 3.6.3 are auto scanned with download statusbar and deleted by Insight.

I'll leave them quarantined until I get a definitive response from the Norton engineers.