Advanced Insight

I think that Norton insight should not just be when downloading a file but also when installing/launching a file. I know that there's an on demand scanner to scan file reputation but most of the time when a user does run a scan and does find a file, the damage is usually already done.

 

The concept is easy, but what about how it works/functions? :smileyindifferent:

Well I believe it could be something on these terms:

Files that are about to install/launch are analyzed (this excludes files that have been analyzed when downloading). It would look exactly like when downloading a file and say that its being analyzed. The files will then been given the rating and done with the same way it would be through download insight.

 

Now what about when the computer is not connected to the internet? :smileysad:

Well files will be installed without any popup to analyze file since there's no way it can. Now those files aren't given full Rene though, instead the file will be sandboxed so it can still be used but can't do any damage. Once the computer is connected to the internet, it will analyze files that are put in the sandbox in the background (meaning it won't popup saying it's analyzing, but will only popup if attention is needed).

  • Files that are good will be taken out of the sandbox and put on the real computer.
  • Files that are bad  will show a popup saying a threat was found and the file will be removed.
  • Files that need attention will popup saying so. The options will be:
  1. Do you want to remove this file? Or
  2. Do you want to keep this file on the system? (If selected keep file then file will be put on the system so that Norton can start analyzing this file to build up its reputation)

 

What do you guys think? Good, Bad, or Not bad but not so sure.

 

PS. I know it might be to late to add this feature to 2012 but I believe it should strongly be on the 2013 recommendation.