My son is trying to download a 750mb game installer from a small company. It takes about 5 hours to download which means he gets 1 shot at it a night as we control his internet availability after 21:30. His first attempt resulted in the file being deleted by Download Insight with the detection WS.Reputation_1.
Needless to say he was a bit annoyed when the long anticipated download finished and was instantly deleted. It wasn't quarantined, he wasn't asked - it just vanished.
I had a hunt in the config of NIS and I couldn't find a way to change this behaviour. I found I could;
* Ignore the risk, or rather stop checking for it, but I don't want to do that as I see value in leaving it in place
* Set an exception from SONAR and Download Insight for a specifc directory, but doing that on the download directory seems a bit daft. I know you don't have to download to "Downloads" all the time, but if you forget.........
I couldn't exclude the filename from any scans, because to do that the file has to be resident on the computer [why would you exclude a file from download insight when you already have it is an interesting question].
I ended up downloading it on a machine I have with McAfee installed on it, which had no such issues with the file, copied it to my machine over the LAN [N360 installed] and did a Network Insight check on the file, which said there were thousands of users and the file was "good" so why his copy of NIS objected to it is another question. Reputation information for this file exists, the file is 8 months old, so in that time there must have been others that have downloaded it with Symantec products - although how they managed it is another question.. :)
All I want to know is how/if I can get Download Insight to either move it to quarantine or ask the question before it zaps the file to oblivion.
Thanks