ElasticSearch.Net dll quarantine from Antivirus - WS.Reputation.1

Question

Symantec Antivirus quarantines the ElasticSearch.Net dll and brings the web application down as access denied error is raised.

ElasticSearch.NET Version : 2.3.1

Symantec Version : 12.1.6

I have added in exceptions however I need to know why elasticsearch dlls are quarantined.

Only Symantec support will be able to tell you why it's engine deems this dll as not trustworthy. It might be that it is only considered potentially harmful because it was copied from an unsecure (network) location. — Filburt, Jun 08 '17 at 10:03

score 3 · Accepted Answer · answered Jun 19 '17 at 01:38

3

You can report this false positive to Symantec to have it properly resolved:

answered Jun 19 '17 at 01:38

kichik

score 2 · Answer 2 · answered Jun 16 '17 at 22:29

2

if you are sure about this dll, restore it from the quarantine, and white list it. Or you can reload elasticsearch from a trusted server.

answered Jun 16 '17 at 22:29

Benoit Douche

2 Answers2