• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

WS.Reputation.1 False positive or not.

I downloaded a file from what I believe to be a trusted source today. It was a whopping 240 megabytes, and is nedded in order for me to run a virtual instrument in my digital audio workstation, unfortunately download insight deleted this file from my USB memory stick as it downloaded, and it identified it as WSReputation.1   For this reason I cannot submit the file for analysis, also the download is password protected, I don't know whether that will be needed in order to analyse the file, but here is the URL which shows up safe in Norton websafe, and will not be a problem as you need to use password to access file. *removed to be on safe side*

I justst spoke to the developer, and he says his (Antivir) Luke Filewalker says nothing found.

Also although the file was deleted from my USB memory stick it is showing up in Quarantine as Resolved - No Action, so does this mean I can delete the entry from quarantine.  Also beneath 'Origin' where it says 'Activity' It says threat actions performed: 1

I assume this relates to download insight removing the file, as opposed to the file performing an action, Am I right?

Replies

Kudos0

Re: WS.Reputation.1 False positive or not.

Please do not click on the above link, as it appears the developer has removed the password protection now so the .exe file will  show now. Anyway I ask developer to submit the file for analysis as a false positive. I don't think you can edit files on this forum so maybe it is best for a moderator to remove link just in case it is not a false positive and someone unknowledgeable decicides to download it.

Removed URL, Can I submit the URL to a Moderator by P.M for them to check it out for me?

Kudos0

Re: WS.Reputation.1 False positive or not.

HI Reactivate,

If you are in contact with the developer of this program see if you can get them to submit it to Symantec as a false positive at the following link.

https://submit.symantec.com/dispute/false_positive/

The reference to action usually means that the file attempted to do something but was blocked by NIS. It could have also been logged as part of the download process also I believe. You said it was removed during the download. Do you mean after the download was completed or did NIS actually remove it during the middle of the download?? Had you tried to run it?

You can safely remove this from Quarantine history which also removes the file itself from the Quarantine directory.

Hope this helps.

Best wishes.

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.6.0.32* Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.6.0.32
Kudos0

Re: WS.Reputation.1 False positive or not.


AllenM wrote:

HI Reactivate,

If you are in contact with the developer of this program see if you can get them to submit it to Symantec as a false positive at the following link.

https://submit.symantec.com/dispute/false_positive/

The reference to action usually means that the file attempted to do something but was blocked by NIS. It could have also been logged as part of the download process also I believe. You said it was removed during the download. Do you mean after the download was completed or did NIS actually remove it during the middle of the download?? Had you tried to run it?

You can safely remove this from Quarantine history which also removes the file itself from the Quarantine directory.

Hope this helps.

Best wishes.

Allen


Hi Allen, I already contacted the developer and gave him the correct URL to submit the file, and he said he would submit it as a new file as he has now updated the file because  it is an ongoing development. As for the file, download insight did not do anything until the file downloaded completely, then it automatically deleted it, all 240 megabytes of it. I had not even got chance to run the .EXE file, and anyway I downloaded it to USB to be used on my desktop where my digital audio workstation is installed. I feel I can't be angry really if Norton has reacted wrongly in deleting a 240mb file, as I guess I would rather be safe than sorry.

Kudos0

Re: WS.Reputation.1 False positive or not.

Hi reactivate,

The developer may also want to submit software for white-listing to prevent future false positives:

https://submit.symantec.com/whitelist/

This thread is closed from further comment. Please visit the forum to start a new thread.