similar test, specifically using commercial keyloggers, Norton did not successfully detect all. In removing threats, Norton almost completely removed 40 percent of the malware samples and related executables. 2010 (17.x) Version 2010 was released officially on September 8, 2009. This version featured Project Quorum, which introduced reputation-based threat detection to keep up with the 200 million attacks each month, many of which Symantec claimed evade signature based detection. The new approach relied on Norton Community Watch, in which participants supply information about the applications running on their computers. Safe applications exhibit common attributes, such as being of a known origin with known publishers. Conversely, malware may have an unknown publisher, among other attributes. Using the data a "reputation score" was used to infer the likelihood of an unknown application being safe, or malicious. Other facets of Quorum were parental controls and spam filtering. Norton Internet Security 2010 bundled a free subscription of OnlineFamily.Norton, which PC Magazine found to be an improvement over the parental controls bundled with prior releases. Spam filtering used technologies Symantec acquired from Brightmail. Two filters were used to find spam: a locally installed one and a check against Symantec's servers to see if the message was known spam. In PC Magazine testing, no valid e-mail were marked as spam. However, 11 percent of spam still reached the inbox. This was a significant improvement over prior releases. The improved SONAR 2 heuristic leveraged reputation data to judge if a program was malicious. Norton Insight was expanded, showing users the number of Norton Community participants who have a certain program installed, its impact on system resources, and how long it had been released. Information about the program's origin and a graph of its resource usage was provided. Autospy helped users understand what Norton did when malware was found. The malware's actions and Norton's resolution were presented to the user. Previous releases removed threats on sight and quietly warned users, potentially confusing when users were deceived in downloading rogue security software. With a compatible graphics card Flip Screen allowed the main display to "flip over" to show the opposite side of the main interface, consisting of a chart of CPU or memory usage and a timeline of security events. Otherwise the Flip Screen link was replaced by a Back link, which opened the back of the windows in a separate window. Safe Search allowed the user to filter out