I downloaded an installer for the K-Lite Codec Pack, and NIS immediately removed it (http://puu.sh/mA39b/a5e7e1bb3f.png) with a signature of WS.Reputation.1, which is odd, since I explicitly excluded that signature from “both risk and SONAR scans” (http://puu.sh/mA39D/a472df3c4f.png). Why is this file still getting removed if I have excluded that signature from detections?
Thanks.