• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Why has Norton repeatedly deleted this?

Notron Security has blocked and deleted a widely used, long established and well regarded program and I cannot find how to get it back or allow another (the fourth) download. The program is QAP, Quick Access Popup, featured in the current issue of Computer Active magazine. The magazine states "The program is safe, so ignore any warnings from your antivirus because these will be false positives." But they didn't  reckon on Norton's heavy handed approach. Usually when this happens (too often) I can opt to have it restored and accepted as trusted, but this time no such option is offered. Why?

Check it out at: www . quickaccesspopup . com

Replies

Kudos0

Re: Why has Norton repeatedly deleted this?

Filename: quickaccesspopup-setup.exe
Identified 4/1/2016 at 2:51:06 PM
Last Used Not Available
Startup Item No
Few Users
Fewer than 50 users in the Norton Community have used this file.
Very New
This file was released less than 1 week  ago.
Good
Norton has given this file a favorable rating.
http:// www. quickaccesspopup.com/download/quickaccesspopup-setup . exe
Downloaded File quickaccesspopup-setup  .exe from quickaccesspopup . com
File Thumbprint - SHA:
7091feddd3710584da36610e9b40e1f67eabab972e13464d3aa13bce84ab6d44

Kudos0

Re: Why has Norton repeatedly deleted this?

Kudos0

Re: Why has Norton repeatedly deleted this?

Huh?  I have no idea what that this means.

Kudos0

Re: Why has Norton repeatedly deleted this?

Clayto:  Huh?  I have no idea what that this means.

Hmm ~ I downloaded and launched program from 

Check it out at: www . quickaccesspopup . com

Kudos0

Re: Why has Norton repeatedly deleted this?

I find this quite unclear. If Norton has given the file 'a favourable rating' why did it block it, along with some damning comment? And the file may be 'new' but only because it is a recent update of something long established. What is wrong with newness anyway, in time it will cease to be new, even without any alteration.

This is an aspect of Norton's esteemed service which has never made much sense to me. And, so I am told, has been damaging to the interests of small developers (like Nirsoft) who complain about it, in vain.

Kudos0

Re: Why has Norton repeatedly deleted this?

Clayto:  I find this quite unclear. [..]

Sorry, all I may comment from this distance is that I downloaded and launched file that may be same file you're referencing.   That's why I posted SHA ...so, you can compare hash to your file.  

For second opinion choose File and / or Search hash at VirusTotal and/or submit to Symantec for review analysis > see > How to report false positives

Kudos0

Re: Why has Norton repeatedly deleted this?

Hello

Small companies need to whitelist their program and then every time there is an update it will be ok and tested out so that it isn't a false positive.  Which Norton program did you use and version number?

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Why has Norton repeatedly deleted this?

Hello. My reference to not understaning the point of the screenshot was a misunderstanding, as I thought it was supposed to show something obvious as to why Norton blocks the program. Of course, I now understand it does not.

Whitelisting? I understand that this costs developers (a lot of) money, which they dont have. If so it seems to me a bit like ransomware!

I have just lost my fifth download. I used to get offered the option to allow / trust such programs, which would make it OK, so why is that not happening now?  I will follow the link about reporting false positives.

I am using the current version of Norton Security.

Kudos0

Re: Why has Norton repeatedly deleted this?

PS. I also meant to say that I believe Quick Access Popup has been 'cleared' by Virus Total and other similar services

Kudos0

Re: Why has Norton repeatedly deleted this?

Are you working with the executable (download and execute) or portable (download and unzip) file.
The portable unzip launch application renders WS.Reputation.1 for me.   Maybe, you're working with portable file.

Filename: quickaccesspopup-7_1_9-64-bit.exe
Threat type: Insight Network Threat. There are many indications that this file is untrustworthy and therefore not safe
quickaccesspopup-7_1_9-64-bit.exe Threat name: WS.Reputation.1
Few Users
Fewer than 50 users in the Norton Community have used this file.
Very New
This file was released less than 1 week  ago.
Medium
This file risk is medium.
File Actions
File: quickaccesspopup-7_1_9-64-bit.exe Removed
File Thumbprint - SHA:
18ecaaea2a22ef28570322cc53b886607a61624ac3738e04c1c1dec9ae6897ef
Note: different SHA (Permalink)


Symantec WS.Reputation.1
http://www.symantec.com/security_response/writeup

Clarification on WS.Reputation.1 detection
https://community.norton.com/forums/clarification-wsreputation1-detection

When File Insight notes Few Users n'/or Very New the item is flagged WS.Reputation.1

User may opt "Trust Now" for reputation that user know and trust as safe and submit file to Symantec for review analysis > see > How to report false positives


Note: maybe you're reporting 32bit file and I'm reporting on 64bit file.
Note: Copy to Clipboard and paste report to Community message may help.

Kudos0

Re: Why has Norton repeatedly deleted this?

Kudos0

Re: Why has Norton repeatedly deleted this?

Hello Clayto

Please  turn off Download Intelligence for the time it takes to download the file and then turn it back on. Please see this KB

https://support.norton.com/sp/en/us/norton-security/current/solutions/kb20100222230832EN_EndUserProfile_en_us

Check out the topics on the bottom of the listing also.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos1 Stats

Re: Why has Norton repeatedly deleted this?

Clayto:

What is wrong with newness anyway, in time it will cease to be new, even without any alteration.

This is an aspect of Norton's esteemed service which has never made much sense to me. And, so I am told, has been damaging to the interests of small developers (like Nirsoft) who complain about it, in vain.

According to a recent article in eweek, "Malware and potentially unwanted applications (PUAs) have become overwhelmingly polymorphic, with 97 percent of malware morphing to become unique to a specific endpoint device, according to a report from security specialist Webroot."  This makes signature and other conventional detection methods almost completely ineffective.  Malware is using newness to get through defenses unrecognized.  What reputation-based detection does is therefore to consider newness of a file as one of the characteristics of possible malware.  When you think about it, nearly all of the new files that appear in the wild everyday are malicious - so, while newness alone isn't a foolproof indicator of malware, it certainly is a red flag.  Yes, there are false positives, but most of the files that reputation-based detection catches will turn out to be actual threats.

https://community.norton.com/en/blogs/norton-protection-blog/new-model-c...

Kudos0

Re: Why has Norton repeatedly deleted this?

Clayto: I also meant to say that I believe Quick Access Popup has been 'cleared' by Virus Total and other similar services.

Sometimes the antivirus solution in VirusTotal will not behave exactly the same as the equivalent public commercial version of the given product.
VirusTotal's antivirus engines are commandline versions, so depending on the product, they will not behave exactly the same as the desktop versions.


Norton | Learn How Norton Goes Beyond Antivirus

Kudos0

Re: Why has Norton repeatedly deleted this?

I am trying to install the 32 bit version and also not the mobile version.

I have now lost the program again ---- sixth attempt,  and also I have not had the pages (screenshots above) which present the option to 'restore and exclude', which is the basis of my complaint. However, I have just been offered that option when trying to install an update of System Ninja, which I have used for sometime and that so far has been OK.I 

I will try temporary turn off Download Intelligence. 

Kudos0

Re: Why has Norton repeatedly deleted this?

Kudos0

Re: Why has Norton repeatedly deleted this?

Clayto:  I have now lost the program again ---- sixth attempt...[..]

 

This thread is closed from further comment. Please visit the forum to start a new thread.