NIS 2011: Insight automatically deleted a 600mb file I downloaded

Last night I downloaded a file from www.nrm.org.uk/scotsmangift. After the file completed downloading Insight scanned the file and then deleted it saying that it was a risk. I reached that site from www.railsimulator.com, a reputable site about railroad simulators. As a Christmas gift, they released a free 600 mb simulator called 'Flying Scotsman'. I was quite upset as I am quite sure this was a false positive and I had just wasted 600mb of bandwidth, and time. Insight says "There are many indications that this file is untrustworthy and therefore unsafe."

My questions are these:

1) What are the 'many indications' the file is untrustworthy.

2) Realizing Insight had received fewer than 5 downloads of this file, at what point does the number of times a file being downloaded increase it's reputation? If a file is reputable, how do the first users to download it get past Insight?

3) I don't want to disable Insight as I think it is a viable and worthwhile function but I'd like to learn more about how to specifically handle a file such as the one I've mentioned.

4) Specifically, I want the option for *me* to make the final determination that a file is safe or not. Is there a way to make Insight do this? I've searched through the Settings and haven't found anything along those lines.

5) I can submit this file as a false positive, and have done that once before with great results from the support folks, but it took several days to get the issue resolved.

6) I want to download this file now. I realize I can disable Insight and then download the file again. This doesn't go to the larger issue of how do I determine a download's reliability *before* I download the file? Not that I should have to do that, but it seems to me that option should be available.

A suggestion - is it not possible for Insight to report on the status of a file *prior* to starting the download simply by checking the file link/name at the start of the download? That would save any loss of time/bandwidth.

 

I appreciate any comments and other thoughts.

John

 

 

 NortonInsight_FlyingScotsmanFile.jpg