I am attempting to install an update to a program from an open source project. It's an application with a very limited application and the project releases frequent updates, so I understood when Norton 360 triggered on a number of files on expansion -- at least dozens -- and quarantined them all as fitting the WS.Reputation.1 "Threat". To my understanding, this threat means that not enough users have used the file for your systems to have "blessed" it. However, I need the program to work. and I accept the risk. There were too many files to go through and restore them all.
I did research on this forum, and was linked to this page, which says that the way to whitelist this risk is to add it under "Signatures to Exclude from All Detections". I did so, and attempted to extract the package again, and immediately the same files were quarantined again, with the same message, under the same threat. I double-checked that the threat is still on the list of signature exclusions.
In some desperation, I tried also adding the destination directory to both "Items to Exclude from Scans" and "Items to Exclude from Auto-Protect, Script Control, Behavioral Protection, and Download Intelligence Detection" -- checking the box each time to include all subdirectories -- and tried extracting again, to exactly the same behavior: immediate quarantine of the same files.
Is this whitelisting supposed to work? Do I need to disable Norton 360 entirely to install, and hope my files aren't deleted once again when it restarts?
Further details:
I am running Norton 360, which actually updated in between attempts, so I know it's up to date. The operating system is Windows 10 Enterprise LTSC version 1809.
A sample of the activity reports:
Filename: Unity.Mathematics.dll
Threat name: WS.Reputation.1Full Path: D:\Program Files\VSeeFace\VSeeFace_Data\Managed\Unity.Mathematics.dll
____________________________
____________________________
On computers as of
2022-10-22 at 02:53:07
Last Used
2022-10-22 at 02:55:08
Startup Item
No
Launched
No
Threat type: Insight Network Threat. There are many indications that this file is untrustworthy and therefore not safe
____________________________
Unity.Mathematics.dllThreat name: WS.Reputation.1
Locate
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Medium
This file risk is medium.
____________________________
Source: External Media
Source File:
Unity.Mathematics.dll
____________________________
File Actions
File: D:\Program Files\VSeeFace\VSeeFace_Data\Managed\Unity.Mathematics.dllRemoved
____________________________
File Thumbprint - SHA:
f915223194ca0fa7376404bb243cd03a34f35a4574e2cf4637f8daa0b5d7bbc8
File Thumbprint - MD5:
1e7ad59cb63c38fef516ad91130348be
