Mysterious Download clamming to originate from Symantec

Hello, not to long ago I was just sitting on a website (youtube) watching a video and Norton then came in with a notification saying that a downloaded file was clean. I was not downloading anything at the time so I clicked for more details and found the following.

Capture2.PNG

Capture.PNG

 

The file was located in "appdata/local/temp" I am just wondering if it is indeed a legitimate file from Symantec and why it has a .exe.part extension.

Any help or knowledge would be greatly appreciated.

I am slightly worried because it says that the file was released less that a week ago and also that only 5 people in the Norton community have this file.

Hi thecakeisalie26,

 

I'd be very interested in knowing what the "More Info" link in your second screenshot gives you.  There has been reports of some people recieving an NPE update via auto LiveUpdate, but not everyone has received it.  The more info we can gather the better. 

 

Can you tell us what the More Info link shows?

 

BTW the liveupdate URL in front of the More Info is a link to the download of the Norton Power Eraser - which is a legitimate (and safe) program.

The "more info" link directs me to here

 

http://safeweb.norton.com/report/show?URL=http:%2F%2Fliveupdate.symantec.com%2Fupgrade%2FNPE%2F1033%2FNPE.exe&product=other&version=20.3.0.36&layout=Retail&lang=0901&source=toolbar&plang=sym:EN&layouttype=Retail&buildname=Retail&heartbeatID=606582D7-DE15-41C1-A936-6512B965D061&env=prod&vendorid=&plid=69&plgid=4&skup=21223126&skum=21236783&skuf=21222958&endpointid={606582D7-DE15-41C1-A936-6512B965D061}&partnerid=&lic_type=2&lic_attr=21124114&psn=HKMMFW84RT62&osvers=6.1&oslocale=iso:AUS&oslang=iso:ENG&os=windows

 

Witch is a Norton safe web report on Symantec.com

Thanks for the info and of course it is shown as SAFE as it is from Symantec.

 

FWIW, I have asked Norton for info on this - but it it the weekend - so it may take awhikle to get a reply.

Ok, Thank

It will be interesting to see if it is legitimate and from Symantec.

 


thecakeisalie26 wrote:

 

Hello, not to long ago I was just sitting on a website (youtube) watching a video and Norton then came in with a notification saying that a downloaded file was clean. I was not downloading anything at the time so I clicked for more details and found the following.

Capture2.PNG

 

[...]

 

The file was located in "appdata/local/temp" I am just wondering if it is indeed a legitimate file from Symantec and why it has a .exe.part extension.

Any help or knowledge would be greatly appreciated.

I am slightly worried because it says that the file was released less that a week ago and also that only 5 people in the Norton community have this file.


Please open the File Insight window again for this file and, as per you screenshot above, click on the 'Copy to Clipboard' link shown in the lower right-hand corner of the window. Please paste this information into your next post.

 

Could you also check your Norton Security History and review the 'LiveUpdate' section to see if you encountered the following Norton Power Eraser 'Failed to complete' error:

 

Date & Time21/03/2013 20:01
RiskMedium
ActivityLiveUpdate Session
StatusCompleted
Recommended ActionNo Action Required
Type of UpdateInteractive
ResultNot all of the updates were successful.
Date & Time21/03/2013 20:01
Total Updates Applied3
Norton Web Protection DefinitionsSuccess (5.26KB)
Norton Power EraserFailed to complete (3.30MB)
Norton Antispam Definitions X64Success (274.84KB)
Norton 2013 Reputation Revocation ListSuccess (1.56KB)
Reboot RequiredNo

 

Investigate any recent Medium Severity entries in the LiveUpdate section of your Norton Security History as these entries indicate that a problem occurred during the update. Please advise.

 

Thanks 

 

 

 


elsewhere wrote:

thecakeisalie26 wrote:

 

Hello, not to long ago I was just sitting on a website (youtube) watching a video and Norton then came in with a notification saying that a downloaded file was clean. I was not downloading anything at the time so I clicked for more details and found the following.

Capture2.PNG

 

[...]

 

The file was located in "appdata/local/temp" I am just wondering if it is indeed a legitimate file from Symantec and why it has a .exe.part extension.

Any help or knowledge would be greatly appreciated.

I am slightly worried because it says that the file was released less that a week ago and also that only 5 people in the Norton community have this file.


Please open the File Insight window again for this file and, as per you screenshot above, click on the 'Copy to Clipboard' link shown in the lower right-hand corner of the window. Please paste this information into your next post.

 

Could you also check your Norton Security History and review the 'LiveUpdate' section to see if you encountered the following Norton Power Eraser 'Failed to complete' error:

 

Date & Time21/03/2013 20:01
RiskMedium
ActivityLiveUpdate Session
StatusCompleted
Recommended ActionNo Action Required
Type of UpdateInteractive
ResultNot all of the updates were successful.
Date & Time21/03/2013 20:01
Total Updates Applied3
Norton Web Protection DefinitionsSuccess (5.26KB)
Norton Power EraserFailed to complete (3.30MB)
Norton Antispam Definitions X64Success (274.84KB)
Norton 2013 Reputation Revocation ListSuccess (1.56KB)
Reboot RequiredNo

 

Investigate any recent Medium Severity entries in the LiveUpdate section of your Norton Security History as these entries indicate that a problem occurred during the update. Please advise.

 

Thanks 

 

 

 


Thankyou for your reply.

Unfortunatley I restored my PC to a previous disk image that I had created about a week ago as I wanted to eliminate any posability that there was a virus or anything nasty in my system.

So I can no longer access the download insight data on the file.

Sorry for the inconvinience.

 

Hello, not to long ago I was just sitting on a website (youtube) watching a video and Norton then came in with a notification saying that a downloaded file was clean. I was not downloading anything at the time so I clicked for more details and found the following.

Capture2.PNG

Capture.PNG

 

The file was located in "appdata/local/temp" I am just wondering if it is indeed a legitimate file from Symantec and why it has a .exe.part extension.

Any help or knowledge would be greatly appreciated.

I am slightly worried because it says that the file was released less that a week ago and also that only 5 people in the Norton community have this file.