Ce sujet a besoin d'une solution.
Réponses
bjm_ Guru
Combattant Norton25
Insc: 2008-09-07
Messages: 33,389
Solutions: 1,915
Remerciements: 5,279
Re: norton file submission taking 5 days, way more than 48 hours
Envoyé le: 2023-08-30 | 07:23 · Édité: 2023-08-30 | 07:41 · Permalien
We'll try to call attention.
https://submit.norton.com/?type=CHECK&submission_id=500bf688-2624-46f8-9ffa-694406715795
bjm_ Guru
Combattant Norton25
Insc: 2008-09-07
Messages: 33,389
Solutions: 1,915
Remerciements: 5,279
Re: norton file submission taking 5 days, way more than 48 hours
Envoyé le: 2023-08-30 | 08:33 · Édité: 2023-08-30 | 08:40 · Permalien
@ereiss
~ my understanding = Norton detection was removed from the file.
Are you still seeing that Norton detection?
Please share screenshot of that detection and download link, if available.
Please post back progress.
Re: norton file submission taking 5 days, way more than 48 hours
Envoyé le: 2023-08-30 | 08:39 · Permalien
My problem is that we don't use Norton. Our Developer compiled the file and one of our customers that does use Norton complained about the file after his Norton scanned the file.
So my concern is what to tell him to check it.
Does he need to clear and redownload virus definitions.
I don't have a way to test this.
And by "detection was removed from the file" does that then mean the file is clean of a virus/trojan?
bjm_ Guru
Combattant Norton25
Insc: 2008-09-07
Messages: 33,389
Solutions: 1,915
Remerciements: 5,279
Re: norton file submission taking 5 days, way more than 48 hours
Envoyé le: 2023-08-30 | 08:53 · Édité: 2023-08-30 | 09:05 · Permalien
What type of file?
Is download link available?
Is file signed?
Is file known to VirusTotal?
ask your customer to run Norton LiveUpdate and run Norton scan against the file.
ask your customer to run Norton File Insight against the file.
Norton detection was removed from the file.
Re: norton file submission taking 5 days, way more than 48 hours
Envoyé le: 2023-08-30 | 09:55 · Permalien
The type of file is an .EXE. It is an installer that was compiled with Visual Studio 2022 with WPF.
The download is behind a paywall and only paying customers can reach it.
The file is not signed, this is something I have already brought up with our development team and their manager.
The file is known to VirusTotal.
The Hash or ID is 2f5aa4391d4950accf49046dc6e0bb0461b7575e6303d7ac45bfabf37abef9aa
A Search on VirusTotal for the hash returns the same results as when I upload the original .EXE.
I had done this last Thursday before submitting to Norton.
Thanks.
bjm_ Guru
Combattant Norton25
Insc: 2008-09-07
Messages: 33,389
Solutions: 1,915
Remerciements: 5,279
Re: norton file submission taking 5 days, way more than 48 hours
Envoyé le: 2023-08-30 | 11:13 · Édité: 2023-08-30 | 11:51 · Permalien
Maybe, Norton flag was WS.Reputation.1 = reputation score based upon "the wisdom of crowds".
WS.Reputation.1 is a detection for files that have a low reputation score based on analyzing data from Norton's community of users. Detections of this type are based on Norton’s reputation-based security technology.
The reputation-based system uses "the wisdom of crowds" (millions of end users) connected to cloud-based intelligence to compute a reputation score for an application.
WS.Reputation.1 detection is based purely on a file's reputation, which can tell you if its particular usage and distribution patterns match those frequently seen with malware. A lot of legitimate files will match this reputation profile at some point in their lives. So this detection is sort of a "better safe than sorry" block based on the premise that not enough is known about the file to declare it safe. (credit SendOfJive)
fwiw ~ In my experience WS.Reputation.1 flag usually clears as Norton gathers more telemetry.
fwiw ~ old related threads
Clarification on WS.Reputation.1 detection
https://community.norton.com/en/forums/clarification-wsreputation1-detection
FED UP WITH WS.REPUTATION.1
https://community.norton.com/en/forums/fed-wsreputation1
WS.Reputation is Crap!
https://community.norton.com/en/forums/wsreputation%C2%A0-crap
@ereiss
Maybe, ask your customer if Norton detection was WS.Reputation.1?
This thread is closed from further comment. Please visit the forum to start a new thread.