Norton Power Eraser


  1. Posts : 622
    Arch Linux 64-bit
       #1

    Norton Power Eraser


    Norton Power Eraser, a free tool by Symantec, "uses aggressive methods" to detect and remove "crimeware". It can display many false positives and, therefore, is intended to be used when all other options have been exhausted.

    It's still in beta but you wouldn't know until you download it.

    http://security.symantec.com/nbrt/ov...origin=default

    PieterV (Symantec Employee) said:
    I would like to re-iterate how aggressive mode works, and that the reported files are not considered FP's if only detected in aggressive mode.

    Aggressive mode is the last line of defense, you already tried normal mode, and you suspect that you are still infected, then you try aggressive mode.

    Normal mode uses a combination of local heuristics and signatures, as well as cloud signatures and reputation.

    Aggressive mode uses cloud reputation data only, and any file that is not known good is considered bad.
    This is important, if the file would be marked as Norton Trusted in the product, then it will not be detected.
    If the file is NOT marked Norton Trusted, then it will be detected.

    This means that unless a file is known to be completely trustworthy, it will be detected.
    That is why this is aggressive mode, i.e. if not known good then it is bad.

    E.g. newly released files may be detected.
    E.g. files used by a very small number of users may be detected.
    E.g. files that are unique (have a unique SHA2 hash), may be detected.


    Regards
    Pieter
      My Computer


  2. Posts : 8,476
    Windows® 8 Pro (64-bit)
       #2

    Is it something like Hitman pro?
      My Computer


  3. Posts : 622
    Arch Linux 64-bit
    Thread Starter
       #3

    No. Hitman Pro uses behaviour analysis to detect a threat. NPE:

    "Normal mode uses a combination of local heuristics and signatures, as well as cloud signatures and reputation.

    Aggressive mode uses cloud reputation data only, and any file that is not known good is considered bad."

    It doesn not scan the whole computer so that and the use of a cloud are the only similarities I see.

    It is meant to be used when you have tried everything else (scan with Hitman Pro, Malwarebytes, etc.) but still believe there is malware on your system.
    "You should use Power Eraser only when nothing else will remove the threat and you are willing to accept the risk that the scanner may quarantine a legitimate program.
    ...
    Because the Norton Power Eraser uses aggressive methods to detect these threats, there is a risk that it can select some legitimate programs for removal. You should use this tool very carefully, and only after you have exhausted other options."

    For reputation it uses Norton Insight.
    Last edited by malexous; 30 Apr 2010 at 03:58.
      My Computer


  4. Posts : 8,476
    Windows® 8 Pro (64-bit)
       #4

    Oops! That sounds risky.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:13.
Find Us