What is ws.reputation.1

Files reported as WS. For example, users can be tricked into using non-malicious programs, such as Web browsers, to unknowingly perform malicious actions, such as downloading malware. Some otherwise harmless programs may have flaws that malware or attackers can exploit to perform malicious actions. Malicious websites, or legitimate websites that have been hacked, can infect your machine through exploit kits that use vulnerabilities on your computer to install this Trojan without your permission of knowledge.

Another method used to propagate this type of malware is spam email containing infected attachments or links to malicious websites.

Cyber-criminals spam out an email, with forged header information, tricking you into believing that it is from a shipping company like DHL or FedEx. The email tells you that they tried to deliver a package to you, but failed for some reason. Sometimes the emails claim to be notifications of a shipment you have made. And with that, your computer is infected with the WS. The threat may also be downloaded manually by tricking the user into thinking they are installing a useful piece of software, for instance a bogus update for Adobe Flash Player or another piece of software.

Malwarebytes AdwCleaner is a free utility that will scan your computer for adware programs that may have been installed without your knowledge.

If I allow the application, it seems to disappear off of the list, but that's not what I want to do. I would rather block anything with a poor or non-existent reputation and get these lingering detections off of the Still Infected and New download risks lists. Various applications about 20 different examples from various web sites. Sorry about the general answer. Would one example help? What version of SEP were you using before?

Here's a good video:. Because this detection is based on a reputation score, it does not represent a specific class of threat like adware or spyware, but instead applies to all threat categories.

You can create an exception for an application that your users download. You can also create an exception for a specific Web domain that you believe is trustworthy.

See Specifying how Symantec Endpoint Protection handles an application that scans detect or that users download. If you believe that a program has been incorrectly classified by the Symantec reputation-based security system, then you may submit a dispute using this Web form.

I have read many articles about download insight, created a test environment to learn how it works and behaves but I am still struggling. My production environment shows that the number of unproven files detected is about The number seems to grow even though it appears that the same 20 files just get redetected over and over day after day.

In all 20 cases, the action is "Left Alone. If it turns out that the app is legit, I would like to use the logs to create the exception. Is this achievable? Also, half of the detected files are exes in the recycle bin. Is there a way that I can have SEP just quarantine or delete these files that are being flagged constantly because of reputation so that the computers no longer show up as infected? You either need to increase the sensitivity level or adjust the setting for their use in the Symantec Community.

And one more question. In my testing, I download an exe using FF or IE, and after a few seconds SEP creates a popup with the message "There is not enough information about this file to recommend it. Linked pull requests. Copy link. Hi guys, While trying to install the latest release of conan for Windows, Symantec has detected the following malware ; WS.

Cheers Renaud R, The text was updated successfully, but these errors were encountered:. Could you please share more details? Do you have a log containing such message? Hi, Please find the corresponding log msgs:: "conan Cheers Renaud. Which installer did you use? The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears. Remove the device, and this error should be resolved. Code10 Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

A component version required by the application conflicts with another component version already active. Conflicting components are:. EXE version To see if more information about the problem is available, check the problem history in the Action Center control panel.

The computer with the IP address The server could not start. Posted 14 September - AM Here is the addition. Edited by jake21, 14 September - AM. Please post it. Posted 14 September - AM Here is the attachment. Type Notepad and and click the OK key. Please copy the entire contents of the code box below to the a new file. The location is listed in the 3rd line of the Farbar log you have submitted.

Restart the computer normally to reset the registry. The tool will create a log Fixlog. Posted 14 September - PM Computer runs fine The system needed a reboot.. Posted 14 September - PM How do these steps check the file I have on the flash drive that gives the virus error? Please do so and allow the utility to clean up those drives as well. Wait until it has finished scanning and then exit the program.

Reboot your computer when done.