• All Community
    • All Community
    • Forums
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos1 Stats

WS.Reputation is Crap!

WS.Reputation is Crap , cause i have to Download ~ 80GB now 4 times.

"Kategorie: Download-Insight
Datum/Uhrzeit,Risiko,Aktivität,Status,Pfad - Dateiname
08.01.2017 13:44:24,Mittel,Download-Insight analysierte zosSteamStarter.exe,entfernt,e:\SteamLibrary\SteamApps\common\Zenimax Online\zosSteamStarter.exe"

The Game is The ElderScrolls Online and this is 1000% not a Virus.

I need to switch off the WS.Reputation Crap. If this isn´t possible , i will buy another Antivirus. And i´ll never buy this Norton crap again.

JoachimK
 

Replies

Kudos0

Re: WS.Reputation is Crap!

All you need to do is exclude it. Add the game to your exclusions and then exclude the folder. You can go in your Norton history and recover items from your quarantine
Kudos0

Re: WS.Reputation is Crap!

Tnx for reply.

I´ll try to exclude it , but 

"zosSteamStarter.exe,entfernt" 

entfernt = deleted 

no recovery possible.

JoachimK

Kudos0

Re: WS.Reputation is Crap!

It's not delete unless you cleared your quarantine entries. Norton like any other antiviruses makes a backup copy. Did you look in your quarantine? Did you try to redownload the game from Steam?

Kudos0

Re: WS.Reputation is Crap!

There are two ways to deal with this.  Either create a special folder and exclude it and its contents from scans and Auto-Protect.  Download the file into that folder.  Or go into Norton Settings and temporarily disable Download Intelligence while you download the file.

https://support.norton.com/sp/en/us/home/current/solutions/v23920640_ns_...

Kudos0

Re: WS.Reputation is Crap!

PatsSoxBruins:

It's not delete unless you cleared your quarantine entries. Norton like any other antiviruses makes a backup copy. Did you look in your quarantine? Did you try to redownload the game from Steam?

WS.Reputation detections are not normally placed in Quarantine and so may therefore not be recoverable.  The reason for this is that Quarantine is designed to allow a user to restore a removed file back to their system (as would be necessary if its removal had broken something).  Downloads that are blocked as WS.Reputation were never on the system, so no reason to quarantine the file.

Kudos0

Re: WS.Reputation is Crap!

SendOfJive: WS.Reputation detections are not normally placed in Quarantine and so may therefore not be recoverable. 

FWIW ~ all WS.Reputation.1 detections on my machine were placed in Quarantine and restored from Quarantine ~ YMMV  > for example

Kudos0

Re: WS.Reputation is Crap!

bjm_:

FWIW ~ all WS.Reputation.1 detections on my machine were placed in Quarantine and restored from Quarantine ~ YMMV  > for example

That is possible, especially if the detection was of a file that was already on your system.  I am curious to know if you were able to restore any files that were removed as they were downloaded.  There have been a significant number of WS.Reputation download detections reported where the user is unable to find the file quarantined.  That is usually the basis of the the complaint against this detection, not that Norton removed a file, but that the file, often quite large, needs to be downloaded again as seems to be the case in this thread.

Kudos0

Re: WS.Reputation is Crap!

SendOfJive: I am curious to know if you were able to restore any files that were removed as they were downloaded.  There have been a significant number of WS.Reputation download detections reported where the user is unable to find the file quarantined.  That is usually the basis of the the complaint against this detection, not that Norton removed a file, but that the file, often quite large, needs to be downloaded again as seems to be the case in this thread.

FWIW ~ all WS.Reputation.1 detections on my machine [ were removed as they were downloaded ] were placed in Quarantine and restored from Quarantine ~ YMMV

That is possible, especially if the detection was of a file that was already on your system. 

Yes, my WS.Reputation.1 flags were installer update downloads for installed programs already on my machine...e.g., rolling beta updates ~ YMMV

and my WS.Reputation.1 flags were also from reports by users....as "Item deleted", "Item blocked", "Where is my file?"  I've test/download where reasonably able to reproduce and found items in Quarantine (allot were WS.Reputation.1).

Kudos4 Stats

Re: WS.Reputation is Crap!

Several types of detections get removed without quarantine so you don't have a way to restore them.  This has been happening for several years with the introduction of SONAR, items considered medium or high risk got deleted without the ability to restore them and it  started the inconsistent behavior on how Norton handles what it considers "bad" files.

I have personally had several "reputation" items deleted without being quarantined and I have seen hundreds of posts here over the last several years about the same behavior.

The majority of the items seem to be new unsigned executable made by  individual software designers and for some reason "huge" game programs.  Both become very frustrating for the people involved, gamers downloading huge files only to loose them and independent software designers put at a disadvantage for not having the resources to purchase very expensive security certificates.

I have also complained about this several times, I personally don't think anything should be removed without the ability to restore them.

Dave

Kudos0

Re: WS.Reputation is Crap!

Very true Dave. Norton has a big issue with false positives and it's growing daily. Sad coming from such a great program and company.
Kudos2 Stats

Re: WS.Reputation is Crap!

Your always going to get some false positives, but if your able to easily restore the file and exclude it then it would not cause such a problem.  I also think the reputation detections should be more of a warning than a conviction.  I recall seeing 3 or 4 topics about peoples files getting deleted that were not even executable, documents and pictures that were deleted and also not put into quarantine.  You can't just be deleting peoples pictures without providing a way to restore them.

Dave 

Kudos0

Re: WS.Reputation is Crap!

Yeah there was a thread about 2 months back where some said Norton deleted over 1000 pics without being able to get them back. Lately this community is being inundated with false positive claims. It's a huge issue.

Kudos0

Re: WS.Reputation is Crap!

The file wasn´t moved to Quarantine , so i couldn´t restore it.

Had to download the whole game from Steam again... ~ 80GB 

and this happend to me 4 times now.. 

That is why i´m so pissed at this stupid WS.Reputation.

There should be a switch , to switch it off.

Kudos0

Re: WS.Reputation is Crap!

Add the Steam folder to exclusions. 

Kudos4 Stats

Re: WS.Reputation is Crap!

JoachimK:

There should be a switch , to switch it off.

There is: Turn off Download Intelligence.

Kudos0

Re: WS.Reputation is Crap!

Everyone chooses his own protection. Do not act stupid.

If you do not like it, put a different product.

Kaspersky: a lot of bugs (constantly !, from 2009 ver), bad (relatively) network anti-bot and stupid firewall, heavier (network, hardware), but there is excellent Application Control (what for? :D) and Proactive Safe Applictions Mode - cool thing, but more (relatively) FPs and risk of running programs lockout (Ws.Rep... only downloaded!)

ESET: bad (relatively) protection (AV-TEST - the most powerful lab) and stupid firewall. 

BitDefender: without reputation information about files - lower manual proactive protection, because rep info - as context information about files, bad (relatively) network anti-bot, heavier (hardware), bad (relatively) anti-exploit. 

TrendMicro: without reputation information about files - lower manual proactive protection, stupid firewall (Windows :D), bad (relatively) anti-exploit. 

Comodo: a lot of bugs (constantly), sandbox and HIPS only, no antivirus, all very bad. :D

All the rest is worse of this.

Rep. FPs - serious negative (relatively Kasp., Bit, ESET, Trend). Dear developers, allow to disable Rep. protection! However, Rep-protection a useful feature. Decision: DI-settings as SEP 14 !!!

Kudos0

Re: WS.Reputation is Crap!

Avira and Bitdefender have the highest detection rates around. Avira is very good. Avast with hardened mode on id also very good. I have had more false positives with Norton than any other antivirus on the market
Kudos0

Re: WS.Reputation is Crap!

I forgot to write, I'm sorry.

BitDefender and Kaspersky compensate bad network anti-bot through safe money technologies. Good solutions, but not powerful on default. Norton powerful on default, Kaspersky powerful in SafeAppMode (the most powerful, but very often FPs in this mode). BitDefender not powerful, just good (as Norton without Ws.Rep), because only reputation technologies - the best protection and from APT. That's all. At each user their own security risks and Norton protection with Insight (Ws.Rep) may be excessive - developers, we need to settings!

P.S. Anti-Ransomware in antiviruses for data protection - bad solutions, because there is Petya Cryptor, Goldeneye...MBR Ransomware - AppControl (manual HIPS) useless. 

Kudos0

Re: WS.Reputation is Crap!

The tops antiviruses as far as detection rates according to AV Comparatives is Avira, Bitdefender, Kaspersky, Trend Micro, F-Secure, Eset, AVG, Avast and Vipre. AV Test.org top ratings are Avast, Avira, Bitdefender, Kaspersky, Trend Micro, Emsisoft and F-Secure. AV Comparatives dropped Norton many years ago. Or visa versa. But this is way off topic. 

The only sound defense against ransomware is having everything backed up. 

Kudos0

Re: WS.Reputation is Crap!

Hi @JoachimK, I have sent you a private message requesting more details on WS.Reputation detection. Please check it when you get a chance. Thanks. 

Sunil_GA | Norton Forums Administrator | NortonLifeLock

This thread is closed from further comment. Please visit the forum to start a new thread.