Norton Power Eraser

[malexous]

Norton Power Eraser, a free tool by Symantec, "uses aggressive methods" to detect and remove "crimeware". It can display many false positives and, therefore, is intended to be used when all other options have been exhausted.

It's still in beta but you wouldn't know until you download it.

http://security.symantec.com/nbrt/overview.asp?lcid=1033&origin=default

I would like to re-iterate how aggressive mode works, and that the reported files are not considered FP's if only detected in aggressive mode.

Aggressive mode is the last line of defense, you already tried normal mode, and you suspect that you are still infected, then you try aggressive mode.

Normal mode uses a combination of local heuristics and signatures, as well as cloud signatures and reputation.

Aggressive mode uses cloud reputation data only, and any file that is not known good is considered bad.
This is important, if the file would be marked as Norton Trusted in the product, then it will not be detected.
If the file is NOT marked Norton Trusted, then it will be detected.

This means that unless a file is known to be completely trustworthy, it will be detected.
That is why this is aggressive mode, i.e. if not known good then it is bad.

E.g. newly released files may be detected.
E.g. files used by a very small number of users may be detected.
E.g. files that are unique (have a unique SHA2 hash), may be detected.


Regards
Pieter

 

[Dinesh]

Is it something like Hitman pro?

 

[malexous]

No. Hitman Pro uses behaviour analysis to detect a threat. NPE:

"Normal mode uses a combination of local heuristics and signatures, as well as cloud signatures and reputation.

Aggressive mode uses cloud reputation data only, and any file that is not known good is considered bad."

It doesn not scan the whole computer so that and the use of a cloud are the only similarities I see.

It is meant to be used when you have tried everything else (scan with Hitman Pro, Malwarebytes, etc.) but still believe there is malware on your system.
"You should use Power Eraser only when nothing else will remove the threat and you are willing to accept the risk that the scanner may quarantine a legitimate program.
...
Because the Norton Power Eraser uses aggressive methods to detect these threats, there is a risk that it can select some legitimate programs for removal. You should use this tool very carefully, and only after you have exhausted other options."

For reputation it uses Norton Insight.

 

[Dinesh]

Oops! That sounds risky.