Is there a Bug in Safe Mode Scan?

Norton Security | Norton Internet Security
21
bjm_ wrote:
   Interesting, I had not considered moving to Quarantine could be a problem for the system.

It may be. My situation is:
  1. A file data1.cab in Java 1.0.7 folder;
  2. A file updater (Adobe Air installer) in Adobe AIR folder;
  3. An appleapplicationsupport.msi in Apple folder;

And I prefer to leave the files in their own position.... Other kinds of file could be moved to Quarantine, even if I think it is useless.

 

 

22
AllenM wrote:
   I also do not recall NIS 2011 reporting these issues during a Safe mode scan

I don't recall this issue in the 2008,09,10,or 11 while I have WinZip installed. I figured this was a bug when I seen WinZip files flagged as a threat. Hopefully this will be resolved Monday.

23

Hello Everyone,

 

For now all your detections you see in safe mode scan from zip files I would let them be for now. I don't know if this is a bug or not but I will for sure do some testing on Monday and email some people so that we can get to the bottom of it. In mean time please be patient while we look into this, thanks.

24

Can one of you who has the issue do the following, in the scanning options turn on scanning of compressed files  turn off Intelligent skup and see if Norton detects anything in one of the zip files flaged in the safe mode scan? I forgot that the scanner in normal mode will not scan compressed files by default that have no detections.

25

Hello michaell

Um, not sure what you're requesting.....

quote: Computer Scan

By default, Compressed Files Scan option is turned on. In this case, Norton Internet Security scans and detects viruses and other security risks in the files within compressed files. When Norton Internet Security performs such a scan, it extracts a file and then checks for threats inside the file.

The other options in this section are configurable only when you turn on the Compressed Files Scan option. These settings include the following:

Intelligent Skip Scanning

Norton Internet Security extracts and scans maximum of 2-GB data from a compressed file. This way, Intelligent Skip Scanning prevents the scan from being stuck up with a single compressed file that contains a large amount of data. Therefore, Norton Internet Security scans your computer faster.

By default, the Intelligent Skip Scanning option is turned on.

By automatically scanning all compressed files, Norton Internet Security maintains a higher level of security.

Thanks for your interest

bjm_

26
bjm_ wrote:

Hello michaell

quote: Computer Scan

By default, Compressed Files Scan option is turned on. In this case, Norton Internet Security scans and detects viruses and other security risks in the files within compressed files. When Norton Internet Security performs such a scan, it extracts a file and then checks for threats inside the file.

The other options in this section are configurable only when you turn on the Compressed Files Scan option. These settings include the following:

Intelligent Skip Scanning

Norton Internet Security extracts and scans maximum of 2-GB data from a compressed file. This way, Intelligent Skip Scanning prevents the scan from being stuck up with a single compressed file that contains a large amount of data. Therefore, Norton Internet Security scans your computer faster.

By default, the Intelligent Skip Scanning option is turned on.



Sorry that is what I meant. Can you try it with out Intelligent Skip on and see if that makes a difference?

27
michaell wrote:

Sorry that is what I meant. Can you try it with out Intelligent Skip on and see if that makes a difference?

So, turn off Intelligent Skip Scanning and run a Full Sys Scan from Safe Mode. 

Clear Entries first or leave Unresolved as is. 

28
michaell wrote:

Can one of you who has the issue do the following, in the scanning options turn on scanning of compressed files  turn off Intelligent skup and see if Norton detects anything in one of the zip files flaged in the safe mode scan? I forgot that the scanner in normal mode will not scan compressed files by default that have no detections.

HI michaell,

 

When I ran the scans last night in Normal mode I made sure Compressed File scans was turned ON and also set Scan Performance Profiles to FULL scan.

 

I noticed that Intelligent Skip Scanning was also turned ON but I don't think this would make a difference on this since MSI files are not listed in the documentation as being skipped and none of the Safe mode detected files are > 2GB.

 

Just to cover all the bases though I just turned Intelligent Skip Scanning OFF and am rerunning a full scan for which I'll post the results as soon as it is done.

 

Thanks

Allen

29
michaell wrote:

Sorry that is what I meant. Can you try it with out Intelligent Skip on and see if that makes a difference?


Same result as the other Scan modes: NO virus found with Intelligent Skip off. It happens only using the Safe Mode scan.

 

P.S.: I've scanned in normal mode only the three files found infected using the Safe Scan mode.

30
bjm_ wrote:
michaell wrote:

Sorry that is what I meant. Can you try it with out Intelligent Skip on and see if that makes a difference?

So, turn off Intelligent Skip Scanning and run a Full Sys Scan from Safe Mode. 

Clear Entries first or leave Unresolved as is. 

In normal mode please. But AllenM is already doing that so we can wait for him and see if it makes a difference.

31
noghere wrote:
michaell wrote:

Sorry that is what I meant. Can you try it with out Intelligent Skip on and see if that makes a difference?


Same result as the other Scan modes: NO virus found with Intelligent Skip off. It happens only using the Safe Mode scan.

 

P.S.: I've scanned in normal mode only the three files found infected using the Safe Scan mode.

Thanks noghere.

32

What does 'Clear Entries' do.  

Does 'Unresolved Security Risks' have a discrete backup folder akin to QBackup.

Does 'Clear Entries' clean just the Security History log or does Clear Entries also clean the backup folder for 'Unresolved Security Risks' (if there is a backup folder)

I tried Search Support ~ 'Clear Entries' from Viewing items in Security History

Bad Request

 Your browser sent a request that this server could not understand.

Reference #7.5ee1ab42.1316403756.0

Waiting for reply ~ Symantec Employee Sym_KeN  ~   (Sym_KeN message)

Waiting for further instructions  ~ Symantec Employee michaell

 

Respectfully submitted

bjm_

33

Hi bjm_

 

The Clear Entries will clear both the history and also remove the file from the quarantine area if applicable.

 

Best wishes.

Allen

34
AllenM wrote:

Hi bjm_

 

The Clear Entries will clear both the history and also remove the file from the quarantine area if applicable.

 

Best wishes.

Allen

Files are only in Unresolved Security Risks.  I did not move to Quarantine.  So, while files are listed only in Unresolved is there also a backup folder somewhere.  Or, is Unresolved just a waiting area without a backup folder like Qbackup. 

35
bjm_ wrote:

  Or, is Unresolved just a waiting area without a backup folder like Qbackup. 


Unresolved is only a warning list in Chronology. No other action taken by NIS. The files remain in their own position till you decide what to do (move to quarantine, delete, clear the unresolved list and so on).

36
noghere wrote:
bjm_ wrote:

  Or, is Unresolved just a waiting area without a backup folder like Qbackup. 


Unresolved is only a warning list in Chronology. No other action taken by NIS. The files remain in their own position till you decide what to do (move to quarantine, delete, clear the unresolved list and so on).

Thank you... so, Unresolved is only a warning list awaiting user action.  Thanks.

Maybe, you know why my Unresolved Security Risks from Safe Mode scan (w Intelligent Skip Scanning ~On) are deemed ~~ "Compressed Threats"

The files are not Compressed.  I have check'd each with More Details > Locate ...and I see no zip'd folder, no zip'd file, no extract option w dialog menu.   *.msi and *.exe does not appear to be compressed ....?

Why does File Insight > Threat name: > Compressed threats > Locate ... find a non compressed file.  Just *.msi and *.exe

Shouldn't there be a user option to Submit to Symantec.   Since, user action is required.  User should have option to Submit to Symantec.  Submit for further testing. 

Wouldn't it be nice if Norton products included a 10mb product User Manual pdf.  ... answering all my silly questions.  


37
bjm_ wrote:
Maybe, you know why my Unresolved Security Risks from Safe Mode scan (w Intelligent Skip Scanning ~On) are deemed ~~ "Compressed Threats"

The files are not Compressed.  I have check'd each with More Details > Locate ...and I see no zip'd folder, no zip'd file, no extract option w dialog menu.   *.msi and *.exe does not appear to be compressed ....?

Why does File Insight > Threat name: > Compressed threats > Locate ... find a non compressed file.  Just *.msi and *.exe


That is a good question!!! My files too are not really "compressed" (.dat, .msi., .exe) even if the Safe Mode Scan says they are compressed (and infected...). We need a Symantec expert help....

38
noghere wrote:
bjm_ wrote:
Maybe, you know why my Unresolved Security Risks from Safe Mode scan (w Intelligent Skip Scanning ~On) are deemed ~~ "Compressed Threats"

The files are not Compressed.  I have check'd each with More Details > Locate ...and I see no zip'd folder, no zip'd file, no extract option w dialog menu.   *.msi and *.exe does not appear to be compressed ....?

Why does File Insight > Threat name: > Compressed threats > Locate ... find a non compressed file.  Just *.msi and *.exe


That is a good question!!! My files too are not really "compressed" (.dat, .msi., .exe) even if the Safe Mode Scan says they are compressed (and infected...). We need a Symantec expert help....

@ Topic

So, are we all waiting for further instructions.  

What have users that posted here done with your Unresolved Security Risks.

Symantec Employees volunteer their time.  Sometimes, they may not return to a Topic. 

The Norton Community is a first and foremost a User to User Community.  

So, from one user to another ....what have you done with your Unresolved Security Risks.

My Risks remain where NIS12 reported them ~ Unresolved Security Risks.

 

Thanks for everyone's time and interest....

bjm_

 

 

39

I am going to spend some time today looking into this and I report back whats going on. Is it correct that Safe Mode scan is reporting that msi and exe files are compressed threats?

40
michaell wrote:

I am going to spend some time today looking into this and I report back whats going on. Is it correct that Safe Mode scan is reporting that msi and exe files are compressed threats?

Yes that is correct. Thank you for looking into this. :smileyhappy: