2ts4242
In an asymmetric synchronization, I noticed today that I'm missing these two files.
When trying to restore them from a backup, Symantec (Norton 360) noted that they were deleted for security reasons.
I still recovered those two files and then uploaded them to VirusTotal for review.
EDIT:
While writing this and uploading the files again, there are suddenly no hits, i. E. also Symantec announces "clean" now.
I have a single hard copy available where Symantec has recently shown "ML.Attribute.HighConfidence". Now everything seems to be alright with Symantec.
Last edited by tuska on 2018-05-08, 22:21 UTC, edited 1 time in total.
The reason is simple: the engines used by Virustotal are updated regularly so that a new scan of a file may have different results than the previous scan. While it is usually not necessary if the last scan was run 30 minutes ago, it is recommended to do so if it dates back days.
2tuska
This is normal behavior of Symantec anti-virus products in conjunction with new programs and compilations. Symantec products use their cloud services to classify new programs as suspicious. If enough people rate them as clean, the reputation of these programs change (improve). This takes time and may explain the different classifications of the same files at different points in time.
Regards
Dalai
Last edited by Dalai on 2018-05-08, 22:25 UTC, edited 2 times in total.
#101164 Personal licence
Ryzen 5 2600, 16 GiB RAM, ASUS Prime X370-A, Win7 x64
The reason is simple: the engines used by Virustotal are updated regularly so that a new scan of a file may have different results than the previous scan. While it is usually not necessary if the last scan was run 30 minutes ago, it is recommended to do so if it dates back days.
I just do not understand why Norton 360 after 3 weeks suddenly deletes 2 files and not earlier.
I had to set an exception rule in Norton 360 so that the files could be restored.
Symantec Norton 360 classifies the files as dangerous (VirusTotal) and 2 hours later they are classified as "clean" again.
It seems like I caught a bad day.
It's also possible that the files were removed because of bad signatures.
@Hacker: True. I don't use any anti-virus software, but I read numerous posts about the features (and "features") of such software and issues other people have with it. In this particular case somebody in the DelphiPraxis forum described that he uses Symantec products (IIRC a commercial one in a company environment) and how that stuff works.
Regards
Dalai
#101164 Personal licence
Ryzen 5 2600, 16 GiB RAM, ASUS Prime X370-A, Win7 x64
True. I don't use any anti-virus software, but I read numerous posts about the features (and "features") of such software and issues other people have with it. In this particular case somebody in the DelphiPraxis forum described that he uses Symantec products (IIRC a commercial one in a company environment) and how that stuff works.
