All,
The WS.REPUTATION is an indication from Norton that he's never seen this particular executable before and Norton doesn't have this executable in its database, so, by Norton's definition, this executable doesn't have a reputation with them. We saw this same false-positive during development. But, you don't have to believe me. Here's the write up from Norton's own web site. See their page at: http://www.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854-99 "The reputation-based system uses "the wisdom of crowds" (Symantec’s tens of millions of end users) connected to cloud-based intelligence to compute a reputation score for an application, and in the process identify malicious software in an entirely new way beyond traditional signatures and behavior-based detection techniques." Let me know if you have any questions. If you get any indications besides the WS.REPUTATION, please let me know. Douglas KA2UPW/5 -----Original Message----- From: Alan P. Biddle <[email protected]> To: 'JoAnne Maenpaa' <[email protected]>; amsat-bb <[email protected]> Sent: Wed, Jul 27, 2011 5:23 pm Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe JoAnne, I checked, and sure enough, Norton promptly removed the download, reporting a WS.REPUTATION.1 virus possibility, and that it was being submitted. I overrode it, and did a binary comparison with the one I downloaded a couple of months ago. Same file. When I scan the executable, it gives me a general message about there being several indications that it is untrustworthy, but that it has actually done nothing. I am guessing it is a false alarm, mostly because there are so few Norton users who have the program. Stay tuned. Alan WA4SCA -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of JoAnne Maenpaa Sent: Wednesday, July 27, 2011 3:04 PM To: [email protected] Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe > I just posted about a virus issue with the file at > http://www.arissattlm.org/download/ARISSatTLM_050_Setup.exe Interesting. Norton Security Suite on WinXP and on another Windows 7 computer has no complaints. I just checked and it says Norton updated itself 8 minutes ago so the definitions are current. What kind of virus were you warned about? -- 73 de JoAnne K9JKM [email protected] _______________________________________________ Sent via [email protected]. Opinions expressed are those of the author. Not an AMSAT-NA member? Join now to support the amateur satellite program! Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb _______________________________________________ Sent via [email protected]. Opinions expressed are those of the author. Not an AMSAT-NA member? Join now to support the amateur satellite program! Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb _______________________________________________ Sent via [email protected]. Opinions expressed are those of the author. Not an AMSAT-NA member? Join now to support the amateur satellite program! Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb
