Norton keeps blocking installation

Norton is blocking installation of my developed audio plugin. So all users who purchased my plugin are not able to disable Norton, as such, can not install the program.

I have purchased a code signing certificate. After signing our binaries, Windows recognizes that the installer belongs to a valid company and allows it to install (within NORTON). That means WIndows Defender has no issues.

 Norton blocks installation and no way to circumvent it. What are our options now?

  @PulsarModular
Please check your Community Inbox
Thanks

with Data Protector off

File: P42 Climax.tmp
File size: 2.55 MB (2,673,152 bytes)
MD5 checksum: 05AF5F8F1259C44FB988B38F599F81E9
SHA256 checksum: 4265AFF5DF77AD61D1BA9F716E06F724148310410E0790788A6BD07A21665C41

png_13900.pngVirusTotal [here]

with Setup executable -> Data Protector excluded

Category: Data Protector
Date & Time,Risk,Activity,Status,Recommended Action,Status - Details,Program Path,Program Name,Date & Time - Details,Action Observed,Target
2/7/2022 5:27:55 AM,High,Data Protector blocked a suspicious action by P42 Climax.tmp,Action Blocked,No Action Required,Action Blocked,C:\Users\bjm\AppData\Local\Temp\is-UDL0U.tmp\P42 Climax.tmp,P42 Climax.tmp,2/7/2022 5:27:55 AM,Suspicious process attempted to modify attributes of a file protected by Data Protector,C:\Windows\is-DHOUT.tmp
2/7/2022 4:53:12 AM,High,Data Protector blocked a suspicious action by P42 Climax.tmp,Action Blocked,No Action Required,Action Blocked,C:\Users\bjm\AppData\Local\Temp\is-H91OQ.tmp\P42 Climax.tmp,P42 Climax.tmp,2/7/2022 4:53:12 AM,Suspicious process attempted to open a file protected by Data Protector,C:\Windows\unins000.dat

fwiw ~ OSArmor - Passive Logging

Date/Time: 2/7/2022 5:24:42 AM
Process: [6820]C:\Users\bjm\AppData\Local\Temp\is-KEN9U.tmp\P42 Climax.tmp
Process MD5 Hash: 05AF5F8F1259C44FB988B38F599F81E9
Parent: [5972]C:\Users\bjm\Desktop\P42 Climax.exe
Rule: BlockUnsignedProcessesAppDataLocal
Rule Name: Block execution of unsigned processes on Local AppData
Command Line: "C:\Users\bjm\AppData\Local\Temp\is-KEN9U.tmp\P42 Climax.tmp" /SL5="$D303C2,4999592,882688,C:\Users\bjm\Desktop\P42 Climax.exe" /SPAWNWND=$9E0522 /NOTIFYWND=$7804E6
Signer: <NULL>
Parent Signer: Pulsar Novation Bilgisayar ve  Programcılık Hiz. Tic. Ltd. Şti.
User/Domain: bjm/DESKTOP-DELL
System File: False
Parent System File: False
Integrity Level: High
Parent Integrity Level: High


Configure Data Protector to block malicious processes affecting your PC
https://support.norton.com/sp/en/us/norton-360/current/solutions/v130571264

Data Protector does not like .tmp files created during installs. 
I've often needed to turn off Data Protector for installs.

by my experience - even though the main executable is signed - temporary files may not be signed.
I don't know if temporary file not signed is causal.

Lets see if I can get some help.  

Category: Data Protector
Date & Time,Risk,Activity,Status,Recommended Action,Status - Details,Program Path,Program Name,Date & Time - Details,Action Observed,Target
2/7/2022 4:53:12 AM,High,Data Protector blocked a suspicious action by P42 Climax.tmp,Action Blocked,No Action Required,Action Blocked,C:\Users\bjm\AppData\Local\Temp\is-H91OQ.tmp\P42 Climax.tmp,P42 Climax.tmp,2/7/2022 4:53:12 AM,Suspicious process attempted to open a file protected by Data Protector,C:\Windows\unins000.dat

Filename: P42 Climax.exe
Full Path: C:\Users\bjm\Desktop\P42 Climax.exe

Developers 
Pulsar Novation Bilgisayar ve  Programcılık Hiz. Tic. Ltd. Åžti.

Version 
0.0.0.0

Identified 
2/7/2022 at 4:51:37 AM

Last Used 
2/7/2022 at 4:52:00 AM

Startup Item 
No

Very Few Users
Fewer than 5 users in the Norton Community have used this file.

New
This file was released 24 days ago.

Trusted
Norton has given this file a trusted rating.

Source File:
P42 Climax.exe

File Thumbprint - SHA:
153e7155a93120dc62063d23fd5eba4bc0ee961abe51ce2b1143bc9e9926b958
File Thumbprint - MD5:
5194c88fb96e1dd4f474b934ea2710b1

VirusTotal [here]
 

Report a suspected incorrect detection to NortonLifeLock
https://support.norton.com/sp/en/us/home/current/solutions/v126152382

Submit a file to NortonLifeLock
https://support.norton.com/sp/en/us/home/current/solutions/kb20090602171902EN

Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832EN


Please tell us what Norton is telling you regarding this event.
For information regarding this event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste here.

For second opinion choose File &/or Search hash at VirusTotal 


Act on quarantined risks or threats
https://support.norton.com/sp/en/us/home/current/solutions/v6200305

Turn off or turn on Download Intelligence
https://support.norton.com/sp/en/us/norton-security/current/solutions/v23920640

Exclude files and folders from Norton Auto-Protect, SONAR, and Download Intelligence scans
https://support.norton.com/sp/en/us/home/current/solutions/v3672136

Fix problem detecting a file or program as a threat even after you exclude it from scan
https://support.norton.com/sp/en/us/home/current/solutions/v115455517

Configure Exclusions/Low Risks settings
https://support.norton.com/sp/en/us/norton-360/home/solutions/v15457075

Exclude files with low-risk signatures from Norton scans
https://support.norton.com/sp/en/us/home/current/solutions/v15463085

I mean to say, without Norton, Windows Defender recognizes the company name and completes the installation. Only When Norton is running that it blocks.