[amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe

[Alan P. Biddle]

Douglas,

Thanks for the confirmation of my understanding.  One would think a more
explicit message would be generated. 

Alan
WA4SCA
 

-----Original Message-----
From: Douglas Quagliana [mailto:dquagliana at aol.com] 
Sent: Wednesday, July 27, 2011 9:31 PM
To: APBIDDLE at mailaps.org; k9jkm at comcast.net; amsat-bb at amsat.org
Subject: Re: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe

All,


The WS.REPUTATION is an indication from Norton that he's never seen this 
particular executable before and Norton doesn't have this executable in its 
database, so, by Norton's definition, this executable doesn't have a
reputation 
with them. We saw this same false-positive during development.

But, you don't have to believe me.  Here's the write up from Norton's own
web site.
See their page at:

http://www.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854
-99

"The reputation-based system uses "the wisdom of crowds" (Symantec's tens of

millions of end users) connected to cloud-based intelligence to compute a
reputation 
score for an application, and in the process identify malicious software in
an entirely 
new way beyond traditional signatures and behavior-based detection
techniques."

Let me know if you have any questions.  If you get any indications besides
the
WS.REPUTATION, please let me know.


Douglas KA2UPW/5 


-----Original Message-----
From: Alan P. Biddle <APBIDDLE at UNITED.NET>
To: 'JoAnne Maenpaa' <k9jkm at comcast.net>; amsat-bb <amsat-bb at amsat.org>
Sent: Wed, Jul 27, 2011 5:23 pm
Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe


JoAnne,





I checked, and sure enough, Norton promptly removed the download, reporting


a WS.REPUTATION.1 virus possibility, and that it was being submitted.  I


overrode it, and did a binary comparison with the one I downloaded a couple


of months ago.  Same file.  When I scan the executable, it gives me a


general message about there being several indications that it is


untrustworthy, but that it has actually done nothing.  I am guessing it is a


false alarm, mostly because there are so few Norton users who have the


program.   Stay tuned.





Alan


WA4SCA





 





-----Original Message-----


From: amsat-bb-bounces at amsat.org [mailto:amsat-bb-bounces at amsat.org
<mailto:amsat-bb-bounces at amsat.org?> ] On


Behalf Of JoAnne Maenpaa


Sent: Wednesday, July 27, 2011 3:04 PM


To: amsat-bb at amsat.org


Subject: [amsat-bb] Re: Mac is OK with ARISSatTLM_050_Setup.exe





> I just posted about a virus issue with the file at 


> http://www.arissattlm.org/download/ARISSatTLM_050_Setup.exe





Interesting. Norton Security Suite on WinXP and on another Windows 7


computer has no complaints. I just checked and it says Norton updated itself


8 minutes ago so the definitions are current.





What kind of virus were you warned about?





--


73 de JoAnne K9JKM


k9jkm at amsat.org 








_______________________________________________


Sent via AMSAT-BB at amsat.org. Opinions expressed are those of the author.


Not an AMSAT-NA member? Join now to support the amateur satellite program!


Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb








_______________________________________________


Sent via AMSAT-BB at amsat.org. Opinions expressed are those of the author.


Not an AMSAT-NA member? Join now to support the amateur satellite program!


Subscription settings: http://amsat.org/mailman/listinfo/amsat-bb