• Welcome to Ecoboost Performance Forum. Please log in or sign up.
collapse

Virus warning trying to download Virtual Dyno

Started by lamrith, August 02, 2017, 11:53:44 AM

Previous topic - Next topic

lamrith

Anyone downloaded it lately?  My Norton Antivirus is flagging it as having a "WS.Reputation.1" virus and deleting the install file.
'13 Sho PP, SCT x4, AJP 92-Octane rev6 (14psi&20spark) NGK 6510, 3Bar, K&N CAI, PPE Catted DP, Dynomax Axleback, 20*9.5 Voxx Lago w/ 275/40-20 GMAX AS-05.

FoMoCoSHO

Quote from: lamrith on August 02, 2017, 11:53:44 AM
Anyone downloaded it lately?  My Norton Antivirus is flagging it as having a "WS.Reputation.1" virus and deleting the install file.
Downloaded yesterday and Defender says its clean.

TopherSho

#2
WS.Reputation.1 is a generic detection. . it means Sonar / Download Insight was unable to verify the software publisher against its own knowledge base.

It means that it has not seen very many people with Norton or Symantec Endpoint Protection Download it and it is still unsure how to score it.  IE bad or good.    the more that people with Norton or Symantec Endpoint Protection download it and no negative effects are noted the reputation score goes up until it is trusted. (for that HASH). 

if the package is small .. i'd disable Norton and then submit the file here for analysis .. : https://www.virustotal.com/

then see if any other major vendors (Kaspersky, Sophos, Trend) flag the file.   if they dont it is likely fine.

2010 non-pp, 98k miles, 3-bar,  .026 plugs, SNOW-KIT STG1, AJPTurbu tune#35, 15.5+psi
Best 0-60 public road 4.35s
Best 1/4 of 12.61 no DA correction

TopherSho

hnmmm trend did not like it.

And it is suspiciously small ... caution is merited ..  looking deeper ..
2010 non-pp, 98k miles, 3-bar,  .026 plugs, SNOW-KIT STG1, AJPTurbu tune#35, 15.5+psi
Best 0-60 public road 4.35s
Best 1/4 of 12.61 no DA correction

FiveLeeter918

hmm downloaded it yesterday, firewall threw up no errors.
- Lee
Technical Sales, Ortiz Tuning and Performance
F-150, Mustang, Lincoln MKS, Taurus SHO and Ford Flex Tuning

Ortiz Performance Vendor Forum | Find us on Facebook! | Shop Today!

lamrith

Let me know what you find Topher.  I figured it should be fine with everyone using it, but weird it triggered my Antivirus.
'13 Sho PP, SCT x4, AJP 92-Octane rev6 (14psi&20spark) NGK 6510, 3Bar, K&N CAI, PPE Catted DP, Dynomax Axleback, 20*9.5 Voxx Lago w/ 275/40-20 GMAX AS-05.

TopherSho

Quote from: FiveLeeter918 on August 02, 2017, 12:23:14 PM
hmm downloaded it yesterday, firewall threw up no errors.

Fireweall wont, it would to trigger IPS or IDS for that to occur.  The file-level AV and or reputation service would need to tigger on it.   

I have it in queue for a manual review with an engineer .. wont hear back right away though. 

the only reason i find it suspicious is the small application size for what it is supposed to do combined with a Trigger from Trend... had it be some crappy third party free AV like clam or  AVG i'd be less suspicious ..
2010 non-pp, 98k miles, 3-bar,  .026 plugs, SNOW-KIT STG1, AJPTurbu tune#35, 15.5+psi
Best 0-60 public road 4.35s
Best 1/4 of 12.61 no DA correction

TopherSho

2010 non-pp, 98k miles, 3-bar,  .026 plugs, SNOW-KIT STG1, AJPTurbu tune#35, 15.5+psi
Best 0-60 public road 4.35s
Best 1/4 of 12.61 no DA correction