Not what you were looking for? Ask our experts!
Reply
Super Contributor
n2009user27
Posts: 162
Registered: ‎12-04-2008

Let the user decide whether or not to quarantine a file

IN NIS 2011, when File Insight detects an apparently risky file (e.g. a downloaded ".exe"), it immediately deletes the file and quarantines it, even if the user is happy to accept the file.  It is very inconvenient having to then go to quarantine every time to restore it, especially if the user is confident that it is a safe file.

The same argument also applies to sofware developers, whose executable files they have developed appear to suffer the same fate without being consulted first.

Therefore, could you please give the user the option of whether or not to delete/quarantine such a file instead?  All it needs is extra buttons on the File Insight notification screen (e.g. "Allow this file" or "Remove") with a suitable warning re the consequences of doing so.  With the filename also displayed, the user can then decide whether or not to let the file through if he recognises it or get it quarantined if he does not.

By the way, it is not good enough just to ask the user to "Trust" the individual file each time, because chances are every time a file is downloaded it will have a different name, so the "trust" list could end up with a huge number of files (unnecessarily).

 

Please note - "Computer software exists as the servant of the user, not the other way round."

 

Thanks.

mp3jo
Posts: 1,471
Topics: 269
Kudos: 100
Solutions: 113
Registered: ‎06-27-2009

Re: Let the user decide whether or not to quarantine a file

Many users in german forum want this too.

 

The option of whether or not to delete/quarantine such a file is a very good idea.

Cheers,
Jo

Graduate of the WTT Classroom

Regular Visitor
Basler
Posts: 10
Registered: ‎12-08-2008

Re: Let the user decide whether or not to quarantine a file

[ Edited ]

Hello together

 

In the German forum, we speak about it. Many of us want this option. Please let the user decide what they delete.

 

Sorry for my language.

 

Basler

Regular Contributor
Niko233
Posts: 765
Registered: ‎06-25-2010

Re: Let the user decide whether or not to quarantine a file

Does false positives appears so frequently?

 

Not so few cases then a malware sample is recognized as a Safe file (about the one in every 30 downloaded files)

 

 

> By the way, it is not good enough just to ask the user to "Trust" the individual file each time, because chances are every time a file is downloaded it will have a different name, so the "trust" list could end up with a huge number of files (unnecessarily).

 

a few piece of info:

Security data is binding with file checksum (for example you can see it in wikipedia as md5 ,sha-256 and other hash algorithms). checksum is changing if only file content was changed (filenames and extentions may be anything you want - it will not change the checksum).

(see video http://community.norton.com/t5/Norton-Protection-Blog/New-Feature-for-Norton-Internet-Security-2010-... )

Regular Contributor
dallas_maverick
Posts: 106
Registered: ‎02-02-2010

Re: Let the user decide whether or not to quarantine a file

[ Edited ]

Hello Niko233,

 

Thank you for your feedback, now to give you more details about the problem :

 

It would be ok if Norton would show this Insight Message for all threats, but it is detecting some applications as false positive and it deletes (quarantines) them instantly, which causes some inconveniences to restore the file and then create a scan exclusion :

 

original.jpeg

 

 

There is a switch between auto / manual for the low threats but not for the higher ones. Should it be changed for the future versions of Norton ?

 

Best regards,

John

Contributor
logi42
Posts: 18
Registered: ‎10-12-2010

Re: Let the user decide whether or not to quarantine a file

Hello

 

I agree with this thread!

 

Manuel

Windows 8 x64, Office 2010, Norton Internet Security v20

Contributor
Dinole
Posts: 37
Registered: ‎12-27-2008

Re: Let the user decide whether or not to quarantine a file

i totally agree with the suggestion, that the user has to decide himself, to quarantine or not. Michael.
Newbie
syntax868
Posts: 1
Registered: ‎10-13-2010

Re: Let the user decide whether or not to quarantine a file

Good Idea. Signed!

Contributor
specimen
Posts: 19
Registered: ‎05-01-2010

Re: Let the user decide whether or not to quarantine a file

I agree because I just face the problem that NIS not allow me to upgrade the software because of false alarm.

Contributor
MarkAtHome
Posts: 27
Registered: ‎09-16-2009

Re: Let the user decide whether or not to quarantine a file

More generally, NIS should not do anything to my system that I cannot easily undo.