I have developed a brand new Windows (11) Forms application and I am testing the ability to download it from my website.
The app downloads ok. And I have run it through the Norton Antivirus Scan which gives it a clean bill of health. However Norton 360 still blocks the setup.exe and .msi files with the messages:-
Very Few Users
New (or Very New) software
Can I disable this check?
may be related:
https://community.norton.com/en/forums/security-alert-false-positive
````````````````````````````````````````````````
DrCharlesA Hedge
TonyHedge
?
~ are you still seeing WS.Reputation.1 detection, at this time.
fwiw ~ I'm not seeing WS.Reputation.1 detection, at this time.
````````````````````````````````````````````````````````````````
Caveat:
I'm not a Bridge player.
I'm not familiar with Bridgemate Simulator.
DrCharlesA Hedge:Thank you for the above comments, but none of them gives me an insight into how to do one of the following:-
a) Get Norton to accept that my program, Bridge Gem, is not malicious, ie contains no viruses, trojans etc
or
b) Disable Norton from issuing the WS.Reputation.1 threat
Potential users of this program will be put off using Bridge Gem when they get the Norton Warning messages.
How do new apps get accepted by Norton?
It appears to me at this moment that Norton is inhibiting, ie is a block on, innovation.
a) https://community.norton.com/en/comment/8553489#comment-8553489
b) are you still seeing WS.Reputation.1 detection, at this time.
Edit: I C @peterweb
DrCharlesA Hedge:Thank you for the above comments, but none of them gives me an insight into how to do one of the following:-
a) Get Norton to accept that my program, Bridge Gem, is not malicious, ie contains no viruses, trojans etc
or
b) Disable Norton from issuing the WS.Reputation.1 threat
Potential users of this program will be put off using Bridge Gem when they get the Norton Warning messages.
How do new apps get accepted by Norton?
It appears to me at this moment that Norton is inhibiting, ie is a block on, innovation.
When you are a developer of an app, Norton has no way of knowing that it is safe until they have tested it. Norton does not scour the internet looking for every new file created every day.
To answer your questions on how to register your file with Norton you need to report the false positive detection using the link in bjm_'s first post here for Report a suspected incorrect detection to Norton.
Thank you for the above comments, but none of them gives me an insight into how to do one of the following:-
a) Get Norton to accept that my program, Bridge Gem, is not malicious, ie contains no viruses, trojans etc
or
b) Disable Norton from issuing the WS.Reputation.1 threat
Potential users of this program will be put off using Bridge Gem when they get the Norton Warning messages.
How do new apps get accepted by Norton?
It appears to me at this moment that Norton is inhibiting, ie is a block on, innovation.
Filename: Bridgemate Simulator Core Setup (v3.1.2).msi
Full Path: C:\Users\user\Desktop\Bridgemate\Bridgemate Simulator Core Setup (v3.1.2) (4)\Bridgemate Simulator Core Setup (v3.1.2).msi
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Trusted
Norton has given this file a trusted rating.
Source File:
Bridgemate Simulator Core Setup (v3.1.2).msi
File Thumbprint - SHA:
2349212bca33513eb251112b36c8d1e28f30d0b3f6b06b43d1267a7448ad270c
File Thumbprint - MD5:
ab1ec95e22ac5f11c401ea118a1e8f36
````````````````````````````````````````````````````````````````````````````````
Filename: setup.exe
Full Path: C:\Users\user\Desktop\Bridgemate\setup.exe
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Trusted
Norton has given this file a trusted rating.
Source File:
setup.exe
File Thumbprint - SHA:
44b11bf8bc6e59b16ddb3d2ae033c19e1f2737f7d68b2b02a4103019d5e096b8
File Thumbprint - MD5:
752b8036e5f4fb37140e293d81601d83
DrCharlesA Hedge:I have developed a brand new Windows (11) Forms application and I am testing the ability to download it from my website.
The app downloads ok. And I have run it through the Norton Antivirus Scan which gives it a clean bill of health. However Norton 360 still blocks the setup.exe and .msi files with the messages:-
Very Few Users
New (or Very New) software
Can I disable this check?
Filename: Bridgemate Simulator Core Setup (v3.1.2).msi
Full Path: C:\Users\user\Desktop\Bridgemate Simulator Core Setup (v3.1.2)\Bridgemate Simulator Core Setup (v3.1.2).msi
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Unproven
There is not enough information about this file to recommend it.
Source File:
Bridgemate Simulator Core Setup (v3.1.2).msi
File Thumbprint - SHA:
2349212bca33513eb251112b36c8d1e28f30d0b3f6b06b43d1267a7448ad270c
File Thumbprint - MD5:
ab1ec95e22ac5f11c401ea118a1e8f36
`````````````````````````````````````````````
No security vendors and no sandboxes flagged this file as malicious
2349212bca33513eb251112b36c8d1e28f30d0b3f6b06b43d1267a7448ad270c
Bridgemate Simulator Core Setup (v3.1.2).msi
https://www.virustotal.com/gui/file/2349212bc7448ad270c
Filename: setup.exe
Threat name: WS.Reputation.1
Your submission was successful
Submission ID is: 3a5e6827-5462-43b2-ad48-e124f26fe6cf
Please store this for future reference.
//check submission status
https://submit.norton.com/?type=CHECK&submission_id=3a5e6827-5462-43b2-ad48-e124f26fe6cf
Submission ID: 3a5e6827-5462-43b2-ad48-e124f26fe6cf
Submission type: False positive
Submission status: Your submission is being processed
Submission details: Submitted for analysis (up to 48 hours)
Updated: Tue, 20 Feb 2024 22:41:20 GMT
Filename: setup.exe
Full Path: C:\Users\user\Desktop\Bridgemate Simulator Core Setup (v3.1.2)\setup.exe
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Poor
There are some indications that this file is untrustworthy.
Source File:
setup.exe
File Thumbprint - SHA:
44b11bf8bc6e59b16ddb3d2ae033c19e1f2737f7d68b2b02a4103019d5e096b8
File Thumbprint - MD5:
752b8036e5f4fb37140e293d81601d83
``````````````````````````````````````````````
No security vendors and no sandboxes flagged this file as malicious
44b11bf8bc6e59b16ddb3d2ae033c19e1f2737f7d68b2b02a4103019d5e096b8
setup.exe
https://www.virustotal.com/gui/file/44b1bf8b019d5e096b8
Filename: setup.exe
Threat name: WS.Reputation.1
Full Path: C:\Users\user\Desktop\Bridgemate Simulator Core Setup (v3.1.2)\setup.exe
Threat type: Insight Network Threat. There are many indications that this file is untrustworthy and therefore not safe
setup.exeThreat name: WS.Reputation.1
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Medium
This file risk is medium.
https: //www. bridgegem.co. uk/downloads/Bridgemate Simulator Core Setup (v3.1.2).zip
Downloaded File from bridgegem.co.uk
Source: External Media
setup.exe
File: C:\Users\user\Desktop\Bridgemate Simulator Core Setup (v3.1.2)\setup.exe Removed
File Thumbprint - SHA:
44b11bf8bc6e59b16ddb3d2ae033c19e1f2737f7d68b2b02a4103019d5e096b8
File Thumbprint - MD5:
752b8036e5f4fb37140e293d81601d83
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I'll submit setup.exe file as false positive...or, you can.
Note: setup.exe is not signed
WS.Reputation.1 usually resolves after awhile, after Norton gathers telemetry from more users.
https://www.bridgegem.co.uk and go to the Downloads page
and download Bridgemate Simulator (v3.1.2)
and/or Bridge Gem (v3.0.10)
Hello @DrCharlesA Hedge
Welcome to Norton Community
``````````````````````````````````````````````
Please review: https://community.norton.com/en/comment/8534079#comment-8534079
```````````````````````````````````````````````````
Report a suspected incorrect detection to Norton
https://support.norton.com/sp/en/us/home/current/solutions/v126152382
Submit a file or URL to Norton
https://support.norton.com/sp/en/us/home/current/solutions/kb20090602171902EN
Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832EN
````````````````````````````````
DrCharlesA Hedge:
... and I am testing the ability to download it from my website.
Care to share website?