I've been trying to download a program from a site that Norton lists as safe.
The program in question is: MP3 WAV Converter 4.13. This is their program It's a program that you download for a free trial and then purchase the license to run it permanently. Norton starts analyzing it and removes the file to quarantine. I
t says that it's a medium threat and that less than 100 users have used this file. mp3wavconverter[1].exe (Reser.Reputation.1) detected by Download Insight.
So my question is: Is this program really a problem or just a false flag? And if it is safe, then how do I download it ? Turn Norton Auto Protect and/or Firewall off or somehow add to to a safe program list?
It's supposed to be a good program, but then again, I don't trust anything 100 per cent, even if it's not free...
I've been trying to download a program from a site that Norton lists as safe.
The program in question is: MP3 WAV Converter 4.13. This is their program It's a program that you download for a free trial and then purchase the license to run it permanently. Norton starts analyzing it and removes the file to quarantine. I
t says that it's a medium threat and that less than 100 users have used this file. mp3wavconverter[1].exe (Reser.Reputation.1) detected by Download Insight.
So my question is: Is this program really a problem or just a false flag? And if it is safe, then how do I download it ? Turn Norton Auto Protect and/or Firewall off or somehow add to to a safe program list?
It's supposed to be a good program, but then again, I don't trust anything 100 per cent, even if it's not free...
I think that this may be a false positive because Norton claims that the web site is 100% safe and they are the ones making this product.
Also, they have been selling these products since 2001.
But to be on the safe side, I did submit to Norton from the quarantine section, as the option to do so is there.
I also submitted via the false positive form as I think it is a false positive ( but I'm not 100% sure).
I don't know how to submit it to threat expert as it won't just accept the name of the file. I downloaded the TEApplet and it will at least let me put the name of the file in it, but it comes up as "the file doesn't exist" when I submit it.
How do I submit the file itself when it is in Norton quarantine as a medium threat?
You can try to submit the file from Quarantine. Check in More details, you may find the option to Submit. Also check if the restore option is available.
Norton claims that the web site is safe from where I downloaded it, yet deletes it when I try to download it. The company web site is the same that you download the program from.
I did use the submit option from quarantine, as well as submitting a form to Norton disputing the Insight claim that it's a medium security risk ( which causes Norton to delete it on download!).
I haven't tried to restore the file from quarantine, although the option is there. I figure it will just delete it again or not even show up as it's listed as a medium security risk.
If you do not want the product to detect it again, add them to the Scan Exclusions List and then restore from Quarantine so that your product does not catch it again
"If you do not want the product to detect it again, add them to the Scan Exclusions List and then restore from Quarantine so that your product does not catch it again"
Yogesh, I was told earlier on this subject that you could only place items that were listed as low threat levels and not the medium and high level threats in the scan exclusions?
So my question is: Is this program really a problem or just a false flag? And if it is safe, then how do I download it ? Turn Norton Auto Protect and/or Firewall off or somehow add to to a safe program list?
It's supposed to be a good program, but then again, I don't trust anything 100 per cent, even if it's not free...
Actually I think you have stumbled upon an issue at least with 17.5. The problem happens with all self extracting executables. Let me see what can be done.
The same thing happened to me when downloading the latest RealTek HD Audio driver, WDM_R241.exe from majorgeeks.com. Download insight reported it as infected, Reser.Reputation.1.
I went to security history,quarantine, highlighted the entry, clicked options. Submitted to Norton and restored the file. Then right clicked on it, clicked Norton file insight, it showed as unproven and I changed that to User Trusted.
Download insight appears to have too many false positives for new files. Latest driver and software updates will by their nature not likely yet have been analysed and download insight should behave more like Norton file insight, giving the user the option to keep the file without having to go through the restore from quarantine process.
First of all, thanks for your help and comments, Yaso,Stu, Yogesh,cgoldman and JRosenfeld .
The issue has been resolved.
I both submitted the file from quarantine and also to the dispute/false positive. I received an e mail from Norton telling me that I didn't have the proper form and to use another one for the Insight Dispute, which I did.
Either late last night or in the AM, after I clicked on live update again, I found that the Application File to the program in question "magically appeared" on my desktop. I checked the Norton Quarantine and it was also gone from there. I didn't try to restore the file so Norton must have resolved the issue via the update.
cgoldman said:
"Actually I think you have stumbled upon an issue at least with 17.5. The problem happens with all self extracting executables. Let me see what can be done."
Yes, I have read through the forum where many people seem to be having the same problem that I did. And again, thanks for your help.
JRosenfeld said: " The same thing happened to me when downloading the latest RealTek HD Audio driver, WDM_R241.exe from majorgeeks.com. Download insight reported it as infected, Reser.Reputation.1."
" Download insight appears to have too many false positives for new files. Latest driver and software updates will by their nature not likely yet have been analysed and download insight should behave more like Norton file insight, giving the user the option to keep the file without having to go through the restore from quarantine process."
Yes again. The reason that Insight gave for classifying it as a medium risk is that it had been released the last 6 days and fewer than 100 people were using it.
I think that it might be a good idea as far as insight is concerned to have a pop up that gives you the option whether you want to download the file or not ( after giving you a risk warning) instead of just automatically quarantining and/or deleting the file, unless of course the file is known to be harmful...
Actually I think you have stumbled upon an issue at least with 17.5. The problem happens with all self extracting executables. Let me see what can be done.
No,not just self-extracting executables - all kind of executables.
"No,not just self-extracting executables - all kind of executables."
You know, I think you could be right about that. The file that it was deleting was an executable, but not a self-extracting type. It was just an application file that I had to click to run it, as well as to run the set-up.