I exported a NIS scan and it's in an unusable .mcf format. How is it read? That is, what opens it?
Britton30 wrote:
I exported a NIS scan and it's in an unusable .mcf format. How is it read? That is, what opens it?
You can import the .mcf file back into the Norton Security History viewer (note the Import/Export links at the bottom of the screenshot below):
You would typically use this Import feature if you wanted to save a copy of your Security History prior to uninstalling and reinstalling the Norton product. I've only used this feature during Norton product beta testing though as it's a handy way of browsing the Security History recorded by previous beta builds of the product.
I typically use the methods described by lmacri above. If you want to export your full Security History as a .txt file instead of an .mcf file, then proceed as follows:
- Open Security History > Show (dropdown box): Full History.
- Click Export.
- Change the 'Save as type:' dropdown box value to 'Text files (*.txt)' and Save the file.
The data in this text file will be grouped into sections corresponding to the ones listed in the Show dropdown box.This file can then be imported into MS Excel for further analysis. This full history export method may save you time if you are planning on analysing more than one section of the Norton Security History.
I exported a NIS scan and it's in an unusable .mcf format. How is it read? That is, what opens it?
Hi Britton30:
Here's another useful hint if you want to see details of a file that was detected as a potential threat by Norton (e.g., Auto-Protect, Download Insight, etc.). Go to History | Resolved Security Risks, double-click on the entry of interest to view the details, click the Copy to Clipboard link, and then paste the information into a basic text editor like Notepad.
I downloaded the CloudCar test file from the Anti-Malware Testing Standards Organization site today (AMTSO test # 5: Test if my cloud protection is enabled). The full details for that Norton detection, including the URL of the download site and SHA256 hash of the suspected file, are shown in the attached .txt text file, but here's a small excerpt:
____________________________
Threat type: Insight Network Threat. There are many indications that this file is untrustworthy and therefore not safe
____________________________
http://www .amtso.org/uploads/cloudcar.exe
Downloaded File cloudcar.exe Threat name: WS.Reputation.1 from amtso.org
____________________________
File Actions
File: c:\users\lori\downloads\cloudcar.exe Removed
____________________________
File Thumbprint - SHA: 3559378c933cdd434af2083f7535460843d2462033de74ec7c70dbe5f70124f5
-----------
MS Windows 32-bit Vista Home Premium SP2 * Firefox 28.0 * IE 9.0 * NIS 2013 v. 20.4.0.40
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS
Thanks all for the answers, I don't know how to "Import" to Excel but I get the text version. I had needed to send a log to someone as a sample.
Hi Britton30:
Glad to hear you got your scan results into a text file.
General instructions for importing a text file into Excel can be found here if you ever need them. There are different ways to import a comma-delimited text file (which is the format used by Norton when saving scan results in the History as noted in message # 2) but I usually do the following in Excel:
- From the menu, click File | Open
- Choose Text Files from the Files of type dropdown and browse to the location where you saved the .txt file
- Click Open and follow the Text Import Wizard prompts, choosing options for importing a comma-delimited file
-----------
MS Windows 32-bit Vista Home Premium SP2 * Firefox 29.0 * IE 9.0 * NIS 2013 v. 20.4.0.40
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS