Mac is OK with ARISSatTLM_050_Setup.exe
I just posted about a virus issue with the file at http://www.arissattlm.org/download/ARISSatTLM_050_Setup.exe. I just downloaded the file on my Mac and the antivirus software does not indicate a problem. Now I remember why i have both PCs and Macs. Thanks, James W5AOO
I just posted about a virus issue with the file at http://www.arissattlm.org/download/ARISSatTLM_050_Setup.exe
Interesting. Norton Security Suite on WinXP and on another Windows 7 computer has no complaints. I just checked and it says Norton updated itself 8 minutes ago so the definitions are current.
What kind of virus were you warned about?
-- 73 de JoAnne K9JKM k9jkm@amsat.org
JoAnne,
I checked, and sure enough, Norton promptly removed the download, reporting a WS.REPUTATION.1 virus possibility, and that it was being submitted. I overrode it, and did a binary comparison with the one I downloaded a couple of months ago. Same file. When I scan the executable, it gives me a general message about there being several indications that it is untrustworthy, but that it has actually done nothing. I am guessing it is a false alarm, mostly because there are so few Norton users who have the program. Stay tuned.
Alan WA4SCA
-----Original Message----- From: amsat-bb-bounces@amsat.org [mailto:amsat-bb-bounces@amsat.org] On Behalf Of JoAnne Maenpaa Sent: Wednesday, July 27, 2011 3:04 PM To: amsat-bb@amsat.org Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe
I just posted about a virus issue with the file at http://www.arissattlm.org/download/ARISSatTLM_050_Setup.exe
Interesting. Norton Security Suite on WinXP and on another Windows 7 computer has no complaints. I just checked and it says Norton updated itself 8 minutes ago so the definitions are current.
What kind of virus were you warned about?
-- 73 de JoAnne K9JKM k9jkm@amsat.org
_______________________________________________ Sent via AMSAT-BB@amsat.org. Opinions expressed are those of the author. Not an AMSAT-NA member? Join now to support the amateur satellite program! Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb
All,
The WS.REPUTATION is an indication from Norton that he's never seen this particular executable before and Norton doesn't have this executable in its database, so, by Norton's definition, this executable doesn't have a reputation with them. We saw this same false-positive during development.
But, you don't have to believe me. Here's the write up from Norton's own web site. See their page at:
http://www.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854...
"The reputation-based system uses "the wisdom of crowds" (Symantec’s tens of millions of end users) connected to cloud-based intelligence to compute a reputation score for an application, and in the process identify malicious software in an entirely new way beyond traditional signatures and behavior-based detection techniques."
Let me know if you have any questions. If you get any indications besides the WS.REPUTATION, please let me know.
Douglas KA2UPW/5
-----Original Message----- From: Alan P. Biddle APBIDDLE@UNITED.NET To: 'JoAnne Maenpaa' k9jkm@comcast.net; amsat-bb amsat-bb@amsat.org Sent: Wed, Jul 27, 2011 5:23 pm Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe
JoAnne,
I checked, and sure enough, Norton promptly removed the download, reporting
a WS.REPUTATION.1 virus possibility, and that it was being submitted. I
overrode it, and did a binary comparison with the one I downloaded a couple
of months ago. Same file. When I scan the executable, it gives me a
general message about there being several indications that it is
untrustworthy, but that it has actually done nothing. I am guessing it is a
false alarm, mostly because there are so few Norton users who have the
program. Stay tuned.
Alan
WA4SCA
-----Original Message-----
From: amsat-bb-bounces@amsat.org [mailto:amsat-bb-bounces@amsat.org] On
Behalf Of JoAnne Maenpaa
Sent: Wednesday, July 27, 2011 3:04 PM
To: amsat-bb@amsat.org
Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe
I just posted about a virus issue with the file at
Interesting. Norton Security Suite on WinXP and on another Windows 7
computer has no complaints. I just checked and it says Norton updated itself
8 minutes ago so the definitions are current.
What kind of virus were you warned about?
--
73 de JoAnne K9JKM
k9jkm@amsat.org
_______________________________________________
Sent via AMSAT-BB@amsat.org. Opinions expressed are those of the author.
Not an AMSAT-NA member? Join now to support the amateur satellite program!
Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb
_______________________________________________
Sent via AMSAT-BB@amsat.org. Opinions expressed are those of the author.
Not an AMSAT-NA member? Join now to support the amateur satellite program!
Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb
Douglas,
Thanks for the confirmation of my understanding. One would think a more explicit message would be generated.
Alan WA4SCA
-----Original Message----- From: Douglas Quagliana [mailto:dquagliana@aol.com] Sent: Wednesday, July 27, 2011 9:31 PM To: APBIDDLE@mailaps.org; k9jkm@comcast.net; amsat-bb@amsat.org Subject: Re: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe
All,
The WS.REPUTATION is an indication from Norton that he's never seen this particular executable before and Norton doesn't have this executable in its database, so, by Norton's definition, this executable doesn't have a reputation with them. We saw this same false-positive during development.
But, you don't have to believe me. Here's the write up from Norton's own web site. See their page at:
http://www.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854 -99
"The reputation-based system uses "the wisdom of crowds" (Symantec's tens of
millions of end users) connected to cloud-based intelligence to compute a reputation score for an application, and in the process identify malicious software in an entirely new way beyond traditional signatures and behavior-based detection techniques."
Let me know if you have any questions. If you get any indications besides the WS.REPUTATION, please let me know.
Douglas KA2UPW/5
-----Original Message----- From: Alan P. Biddle APBIDDLE@UNITED.NET To: 'JoAnne Maenpaa' k9jkm@comcast.net; amsat-bb amsat-bb@amsat.org Sent: Wed, Jul 27, 2011 5:23 pm Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe
JoAnne,
I checked, and sure enough, Norton promptly removed the download, reporting
a WS.REPUTATION.1 virus possibility, and that it was being submitted. I
overrode it, and did a binary comparison with the one I downloaded a couple
of months ago. Same file. When I scan the executable, it gives me a
general message about there being several indications that it is
untrustworthy, but that it has actually done nothing. I am guessing it is a
false alarm, mostly because there are so few Norton users who have the
program. Stay tuned.
Alan
WA4SCA
-----Original Message-----
From: amsat-bb-bounces@amsat.org [mailto:amsat-bb-bounces@amsat.org mailto:amsat-bb-bounces@amsat.org? ] On
Behalf Of JoAnne Maenpaa
Sent: Wednesday, July 27, 2011 3:04 PM
To: amsat-bb@amsat.org
Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe
I just posted about a virus issue with the file at
Interesting. Norton Security Suite on WinXP and on another Windows 7
computer has no complaints. I just checked and it says Norton updated itself
8 minutes ago so the definitions are current.
What kind of virus were you warned about?
--
73 de JoAnne K9JKM
k9jkm@amsat.org
_______________________________________________
Sent via AMSAT-BB@amsat.org. Opinions expressed are those of the author.
Not an AMSAT-NA member? Join now to support the amateur satellite program!
Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb
_______________________________________________
Sent via AMSAT-BB@amsat.org. Opinions expressed are those of the author.
Not an AMSAT-NA member? Join now to support the amateur satellite program!
Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb
I did a little searching and this virus indication seems to show up for some people on various downloads besides ARISSatTLM.
http://community.norton.com/t5/Norton-Internet-Security-Norton/What-is-WS-Re putation-1/td-p/228251
-- 73 de JoAnne K9JKM k9jkm@amsat.org
participants (4)
-
Alan P. Biddle -
Douglas Quagliana -
James Luhn -
JoAnne Maenpaa