All,
The WS.REPUTATION is an indication from Norton that he's never seen this particular executable before and Norton doesn't have this executable in its database, so, by Norton's definition, this executable doesn't have a reputation with them. We saw this same false-positive during development.
But, you don't have to believe me. Here's the write up from Norton's own web site. See their page at:
http://www.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854...
"The reputation-based system uses "the wisdom of crowds" (Symantec’s tens of millions of end users) connected to cloud-based intelligence to compute a reputation score for an application, and in the process identify malicious software in an entirely new way beyond traditional signatures and behavior-based detection techniques."
Let me know if you have any questions. If you get any indications besides the WS.REPUTATION, please let me know.
Douglas KA2UPW/5
-----Original Message----- From: Alan P. Biddle APBIDDLE@UNITED.NET To: 'JoAnne Maenpaa' k9jkm@comcast.net; amsat-bb amsat-bb@amsat.org Sent: Wed, Jul 27, 2011 5:23 pm Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe
JoAnne,
I checked, and sure enough, Norton promptly removed the download, reporting
a WS.REPUTATION.1 virus possibility, and that it was being submitted. I
overrode it, and did a binary comparison with the one I downloaded a couple
of months ago. Same file. When I scan the executable, it gives me a
general message about there being several indications that it is
untrustworthy, but that it has actually done nothing. I am guessing it is a
false alarm, mostly because there are so few Norton users who have the
program. Stay tuned.
Alan
WA4SCA
-----Original Message-----
From: amsat-bb-bounces@amsat.org [mailto:amsat-bb-bounces@amsat.org] On
Behalf Of JoAnne Maenpaa
Sent: Wednesday, July 27, 2011 3:04 PM
To: amsat-bb@amsat.org
Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe
I just posted about a virus issue with the file at
Interesting. Norton Security Suite on WinXP and on another Windows 7
computer has no complaints. I just checked and it says Norton updated itself
8 minutes ago so the definitions are current.
What kind of virus were you warned about?
--
73 de JoAnne K9JKM
k9jkm@amsat.org
_______________________________________________
Sent via AMSAT-BB@amsat.org. Opinions expressed are those of the author.
Not an AMSAT-NA member? Join now to support the amateur satellite program!
Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb
_______________________________________________
Sent via AMSAT-BB@amsat.org. Opinions expressed are those of the author.
Not an AMSAT-NA member? Join now to support the amateur satellite program!
Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb