Symantec 10067161 Product Manual - Page 127

Protecting your files and data 127 About the Norton AntiVirus scans using the reputation-based threat detection. The Insight Network Scan uses the Cloud technology wherein a remote Symantec server on the Web stores the latest reputation information. It checks the Cloud for the reputation information on the filtered files. Norton AntiVirus obtains specific information such as file name and hash key about the filtered reputation files and sends this information to the Cloud. The Cloud analyzes the file information and provides a trust level for each file. The Symantec server sends back the reputation information to your computer. If any of the filtered files is suspicious or vulnerable, Norton AntiVirus assigns Bad or Poor trust level. Apart from reputation information, Norton AntiVirus also checks for the latest virus definitions on the Cloud. w Your computer must be connected to the Internet to access the latest reputation information and virus definitions from the Cloud. If your computer is not connected to the Internet, Norton AntiVirus uses the reputation information that is available locally. When you perform a Reputation Scan, Norton AntiVirus considers only the following categories of files: Executable files This category includes Windows executable files (.exe) and script files (.scr). System files This category includes Windows System files (.sys), dynamic link library files (.dll), and device driver files (.drv). Developer files This category includes ActiveX control files (.ocx).