• コミュニティ内すべて
    • コミュニティ内すべて
    • フォーラム
    • 提案
    • ブログ
高度

お探しの情報が見つからない場合、 フォーラムで質問してください。

このフォーラムスレッドには解決策が必要です。
拍手0

File Insight vs Norton Insight

Curious regarding File Insight vs Norton Insight.  File Insight reports program setup installer Good while Norton Insight reports same installed program Poor.  Curious, Very Few Users n' Very New render File Insight Good and Norton Insight Poor.  
Maybe, File Insight Good is by vendor whitelisting file but, then why Norton Insight Poor.
Download file is deemed File Insight Good favorable rating while installed program is deemed Norton Insight least favorable rating Poor.  
Very Few Users n' Very New seems more in-line with Unproven. 
Disclosure: odd version number are beta e.g., 5.09, 5.11.  Even number are release e.g., 5.10, 5.12.  Note: same Good vs Poor occurs with release even number.
Download = favorable Good.  Installed = least favorable Poor. 
File Insight Good favorable rating.  Norton Insight Poor least favorable rating. 
Curious....

返信

拍手0

Re: File Insight vs Norton Insight

Hello bjm

From the Norton Insight page


Norton Insight lets you see the reputation of files on your computer. It shows the files that are excluded from scans based on Trust Level, Community Usage, and Norton Network data.


File Insight


The File Insight window provides details about any File of Interest that is available on your computer. This option of file analysis is available for the files that you download, scan, or use to perform an activity.


These are taken from either the ? information or the Search of the Term in Norton Support.

File Insight takes into account some of the History Log information. Don't know if this explains it any better than you have in your question.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.
拍手0

Re: File Insight vs Norton Insight

拍手0

Re: File Insight vs Norton Insight

拍手0

Re: File Insight vs Norton Insight

拍手0

Re: File Insight vs Norton Insight

Update from Permalink > now the Wisdom of Crowds really doesn't like 5.11.6

拍手1 Stats

Re: File Insight vs Norton Insight

bjm_:

Curious regarding File Insight vs Norton Insight.  File Insight reports program setup installer Good while Norton Insight reports same installed program Poor. Curious, Very Few Users n' Very New render File Insight Good and Norton Insight Poor.... 
 
Very Few Users n' Very New seems more in-line with Unproven.

Hi bjm_:

I seem to recall that Download Insight often gives an installer a "Good" trust rating if it cannot find a matching MD5 or SHA256 hash (signature) for that executable file in Norton's virus definition database and cannot determine the reputation of that file in the wider Norton community, even if the installer contains PUPs or higher risk malware. Symantec makes the assumption (a dangerous one, in my opinion) that SONAR real-time heuristic detection will protect you by blocking one of these so-called "Good" files if it behaves maliciously after the installer is run and the individual file(s) are unpacked and/or executed.  There are a few demos in HoogendoornJH's thread Trovico Not Discovered that shows how a Sysinternals Process Monitor installer bundled with a PUP (Very Few Users / Very New) was given a trust rating of "Good" by Norton's Download Insight, even though multiple antivirus engines flagged the .exe installer as a threat when it was submitted to VirusTotal.

You might also want to review test results posted by PRIOR and elsewhere in the thread Download Insight showing how higher risk malware that did not have a MD5 / SHA256 hash in the virus definition database evaded detection by Download Insight and still managed to corrupt the Windows OS (another case of a "Good" trust level when the file had Very Few Users and was Very New).  PRIOR found that the trust rating assigned to these Very Few Users / Very New files by Download Insight was often dependent on the file's Origin (i.e., trust was "Good" if the http://... download URL of the malware was missing in the File Insight report; trust was "Unproven" if the download URL was identified).

None of this suggests that your Sandboxie installer and unpacked executables are actually dangerous - only that this quirk with Download Insight means that users shouldn't rely solely on the "Good" vs "Unproven" trust rating assigned to these Very Few Users / Very New files.  For added protection, users should always download their installers from a reputable download site like the software developer's home page and run a second-opinion scan (e.g., Malwarebytes Anti-Malware, VirusTotal) before they execute one of these Very Few Users / Very New files - or if possible, just wait a few days until the file has built a more reliable reputation in the wider Norton community.
-------------
32-bit Vista Home Premium SP2 * Firefox v46.0.1 * NIS v21.7.0.11 * MBAM Premium v2.2.1

拍手0

Re: File Insight vs Norton Insight

Norton reports SHA and MD5 for Sandboxie installer. 
Installer direct from Sandboxie. 
http://www.sandboxie.com/index.php?DownloadSandboxie
Beta installers may be whitelisted as they're rated Good.
http://forums.sandboxie.com/phpBB3/viewtopic.php?f=57&t=22660
executable are duel signed sha1 / sha256
NO PUP's.
Sandboxie downloads.
http://www.sandboxie.com/index.php?AllVersions

just wait a few days until the file has built a more reliable reputation in the wider Norton community.

after a few days Installed went from Poor Permalink to Bad Permalink .  
I can wait a few days or ignore Norton's Wisdom of Crowds for programs I know and trust. 
I've never had WS.Repuation.1 flag that later proved to be malware.  Just me. 
YMMV ~ Regards

拍手0

Re: File Insight vs Norton Insight

拍手0

Re: File Insight vs Norton Insight

5.11.8 and 5.11.9 continues Installer Good...., Installed Poor

拍手0

Re: File Insight vs Norton Insight

Hello bjm

Bring thread to Sunil's attention.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.
拍手0

Re: File Insight vs Norton Insight

Hello floplot,
No biggy.  Norton gathers my feedback thru Norton Feedback.

Maybe, Norton criteria varies Installer vs. Installed. 
Maybe, Wisdom of Crowds varies Installer vs. Installed. 

Cheers

拍手0

Re: File Insight vs Norton Insight

拍手0

Re: File Insight vs Norton Insight

拍手0

Re: File Insight vs Norton Insight

Hello bjm

Isn't there a place where you can trust an item yourself if you trust it?

Thanks

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.
拍手0

Re: File Insight vs Norton Insight

floplot: Hello bjm

Isn't there a place where you can trust an item yourself if you trust it?

Yes > Trust Now Permalinkhttp://postimg.org/image/pvjz0l54b/

This thread is closed from further comment. Please visit the forum to start a new thread.