NAV Download-File Insight - Corrupts Download, Blocks Access to File, Offers No Options

I'm running Windows 7 Home Premium x64. I was downloading a few files for the latest version of EssentialPIM using Firefox 3.6.17. When I tried to download http://www.essentialpim.com/download/EPIMArchDR4.exe , File Insight popped up a dialog saying a virus was detected:

 

NIS2010FileInsight1.jpg

 

Notice that the error is for epimarchdr4.2.exe.part , which means File Insight detected the virus while Firefox was still downloading the file. History also showed:

 

NIS2010FileInsight2.jpg

 

There were no available actions or options for either of the above dialogs, including on the "Show: File Actions" drop-down.

 

I submitted the URL of the file to VirusTotal, which showed the file was clean, even according to Symantec:

http://www.virustotal.com/file-scan/report.html?id=8473aa1411cacffeaba1f2c9f3e6388d14ddb3e313917f7b547e7f856d313720-1306044659

 

I tried downloading the file again, using a different local filename and this time it downloaded with no problems.

 

From Windows Explorer, the corrupt file is smaller in size. I can access the file properties and permissions, but I can only successfully delete the file. If I try to copy the corrupt file, it says:

 

FileAccessDenied1.jpg

 

and if I select Continue, I get this:

 

FileAccessDenied2.jpg

 

 (I blurred out my machinename/username). If I hit Try Again, I get the same error. The Windows Event Viewer shows no errors in any of the logs (Application, Security, System), though Windows Home doesn't audit many events or allow you to change the audit settings.

 

So, what happened to create a mostly inaccessible file and a false positive?

 

 

If needed, below is the full text from NAV History entries:

 

c:\users\public\downloads\epimarchdr4.2.exe.part
____________________________
____________________________
On computer as of
5/22/2011 at 1:06:33 AM
Last Used:
5/22/2011 at 1:06:33 AM
Startup Item: No
Launched: No
____________________________
____________________________
Very Few Users
Fewer than 10 users in the Norton Community have used this file.
____________________________
High
This file risk is high.
____________________________
Threat Details
Detection of a threat based on malware heuristics.
____________________________
Origin

Downloaded from  http://www.essentialpim.com/download/EPIMArchDR4.exe
____________________________
http://www.essentialpim.com/download/EPIMArchDR4.exe
UNTESTED

Downloaded File:
epimarchdr4.2.exe.part
____________________________
File Actions
Running program: c:\users\public\downloads\epimarchdr4.2.exe.part
Access Denied
____________________________
File Thumbprint:
db793f86fc7d55afcbeef0712cccc9fbf73665f37d0a656c018909aa264a8bc7
____________________________







c:\users\public\downloads\epimarchdr4.2.exe.part
____________________________
____________________________
On computer as of
5/22/2011 at 1:06:33 AM
Last Used:
5/22/2011 at 1:06:33 AM
Startup Item: No
Launched: No
____________________________
____________________________
Very Few Users
Fewer than 10 users in the Norton Community have used this file.
____________________________
High
This file risk is high.
____________________________
Threat Details
Detection of a threat based on malware heuristics.
____________________________
Origin

Downloaded from  Not Available
____________________________
URL Not Available
UNTESTED

Source
epimarchdr4.2.exe.part
____________________________
File Actions
File: c:\users\public\downloads\epimarchdr4.2.exe.part
Blocked
____________________________
File Thumbprint:
db793f86fc7d55afcbeef0712cccc9fbf73665f37d0a656c018909aa264a8bc7
____________________________




This is where I downloaded the same file again with no problems:

c:\users\public\downloads\epimarchdr4.2.exe
____________________________
____________________________
Signature:
Not Available
On computer as of
5/22/2011 at 1:18:54 AM
Last Used:
Not Available
Startup Item: No
____________________________
____________________________
Very Few Users
Fewer than 10 users in the Norton Community have used this file.
____________________________
Very New
This file was released less than 1 week ago.
____________________________
Good
There are indications that this file is trustworthy.
____________________________
Origin

Downloaded from  http://www.essentialpim.com/download/EPIMArchDR4.exe
____________________________
http://www.essentialpim.com/download/EPIMArchDR4.exe
UNTESTED

Downloaded File:
epimarchdr4.2.exe
____________________________
File Thumbprint:
8473aa1411cacffeaba1f2c9f3e6388d14ddb3e313917f7b547e7f856d313720
____________________________


I'm running Windows 7 Home Premium x64. I was downloading a few files for the latest version of EssentialPIM using Firefox 3.6.17. When I tried to download http://www.essentialpim.com/download/EPIMArchDR4.exe , File Insight popped up a dialog saying a virus was detected:

 

NIS2010FileInsight1.jpg

 

Notice that the error is for epimarchdr4.2.exe.part , which means File Insight detected the virus while Firefox was still downloading the file. History also showed:

 

NIS2010FileInsight2.jpg

 

There were no available actions or options for either of the above dialogs, including on the "Show: File Actions" drop-down.

 

I submitted the URL of the file to VirusTotal, which showed the file was clean, even according to Symantec:

http://www.virustotal.com/file-scan/report.html?id=8473aa1411cacffeaba1f2c9f3e6388d14ddb3e313917f7b547e7f856d313720-1306044659

 

I tried downloading the file again, using a different local filename and this time it downloaded with no problems.

 

From Windows Explorer, the corrupt file is smaller in size. I can access the file properties and permissions, but I can only successfully delete the file. If I try to copy the corrupt file, it says:

 

FileAccessDenied1.jpg

 

and if I select Continue, I get this:

 

FileAccessDenied2.jpg

 

 (I blurred out my machinename/username). If I hit Try Again, I get the same error. The Windows Event Viewer shows no errors in any of the logs (Application, Security, System), though Windows Home doesn't audit many events or allow you to change the audit settings.

 

So, what happened to create a mostly inaccessible file and a false positive?

 

 

If needed, below is the full text from NAV History entries:

 

c:\users\public\downloads\epimarchdr4.2.exe.part
____________________________
____________________________
On computer as of
5/22/2011 at 1:06:33 AM
Last Used:
5/22/2011 at 1:06:33 AM
Startup Item: No
Launched: No
____________________________
____________________________
Very Few Users
Fewer than 10 users in the Norton Community have used this file.
____________________________
High
This file risk is high.
____________________________
Threat Details
Detection of a threat based on malware heuristics.
____________________________
Origin

Downloaded from  http://www.essentialpim.com/download/EPIMArchDR4.exe
____________________________
http://www.essentialpim.com/download/EPIMArchDR4.exe
UNTESTED

Downloaded File:
epimarchdr4.2.exe.part
____________________________
File Actions
Running program: c:\users\public\downloads\epimarchdr4.2.exe.part
Access Denied
____________________________
File Thumbprint:
db793f86fc7d55afcbeef0712cccc9fbf73665f37d0a656c018909aa264a8bc7
____________________________







c:\users\public\downloads\epimarchdr4.2.exe.part
____________________________
____________________________
On computer as of
5/22/2011 at 1:06:33 AM
Last Used:
5/22/2011 at 1:06:33 AM
Startup Item: No
Launched: No
____________________________
____________________________
Very Few Users
Fewer than 10 users in the Norton Community have used this file.
____________________________
High
This file risk is high.
____________________________
Threat Details
Detection of a threat based on malware heuristics.
____________________________
Origin

Downloaded from  Not Available
____________________________
URL Not Available
UNTESTED

Source
epimarchdr4.2.exe.part
____________________________
File Actions
File: c:\users\public\downloads\epimarchdr4.2.exe.part
Blocked
____________________________
File Thumbprint:
db793f86fc7d55afcbeef0712cccc9fbf73665f37d0a656c018909aa264a8bc7
____________________________




This is where I downloaded the same file again with no problems:

c:\users\public\downloads\epimarchdr4.2.exe
____________________________
____________________________
Signature:
Not Available
On computer as of
5/22/2011 at 1:18:54 AM
Last Used:
Not Available
Startup Item: No
____________________________
____________________________
Very Few Users
Fewer than 10 users in the Norton Community have used this file.
____________________________
Very New
This file was released less than 1 week ago.
____________________________
Good
There are indications that this file is trustworthy.
____________________________
Origin

Downloaded from  http://www.essentialpim.com/download/EPIMArchDR4.exe
____________________________
http://www.essentialpim.com/download/EPIMArchDR4.exe
UNTESTED

Downloaded File:
epimarchdr4.2.exe
____________________________
File Thumbprint:
8473aa1411cacffeaba1f2c9f3e6388d14ddb3e313917f7b547e7f856d313720
____________________________