Advice Request How does Norton decide what File Insight removes?

[Alkajak]

It is notorious for removing software like AdwCleaner and Zemana AntiMalware Portable. It actually marks both of them as "Poor" and "untrustworthy". Both software were downloaded from official source and were not altered. Whitelisting Zemana on Norton as I type this right now.

 

[Ink]

Did you contact either of the developers for their response?

Norton Insight is reputation-based security, which takes a number of factors to determine a score/rating and Norton Community Watch. The ratings are not definitive.

"Traditional fingerprinting of a virus requires the security vendor to obtain a specimen of each threat before they can provide protection. Symantec's reputation-based security takes a totally different approach. It doesn't just focus on bad files, but attempts to accurately classify all software files, both good and bad, based on countless anonymous telemetry "pings" sent to Symantec every second of every day from around the world. These near real-time pings tell Symantec about:

• The applications being deployed on our customer's machines (each application is uniquely identified by its SHA2 hash).
• Where applications came from on the web.
• Whether or not the applications are digitally signed.
• How old the applications are.
• A host of other attributes.

We add to this data from our Global Intelligence Network, our Security Response organization, and legitimate software vendors who provide application instances to Symantec."​

Click on 'Reputation': Star Malware Protection Technologies | Symantec
PDF Whitepaper: https://www.symantec.com/content/dam/symantec/docs/white-papers/reputation-based-security-en.pdf
Good post from QnA: How does File Insight work? | Norton Community
Post from 2008: Norton Insight: A solution to performance improvement without sacrificing security
If you must, Wikipedia: Norton Insight - Wikipedia, the free encyclopedia

 

[jamescv7]

Well Norton File Insight by nature has minimal erroneous result, likely that FP file goes on the location of website as basis where separately mark as malicious by Auto-Protect/Web-Shield base.