Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on January 26, 2016, 03:11:14 PM
-
This behaviour was observed many times before by my users. I'n not using Avast so I do not have my own experinece. You can dowload installer packages on www.rpgcestiny.cz (http://www.rpgcestiny.cz)
Issue was observed today again on the latest installer I have sent to Xzone, biggest czech videogame store. See release notice with a download link here (http://www.zing.cz/novinky/30327/cestina-do-peti-epizod-life-is-strange-s-korekturou).
It's a .NET4 application in an InnoSetup install envelope with a detection of installed .NET libraries. Here's the source code (http://kynosarges.org/DotNetVersion.html).
What is the problem that Avast is blocking this installer and others antivirus solutions has no problem with that? I'm not a developer of the .NET4 application.
Best regards,
Marek Tvrdy
-
upload and test file here www.virustotal.com / www.metascan-online.com
if tested before, click rescan for a fresh result
Post link to scan result here
-
It was already tested - by me :) Virustotal says 100% clean, strange..
-
It was already tested - by me :) Virustotal says 100% clean, strange..
Not entirely strange as.
The VT scan is an on-demand scan not all of the functions in the on-demand real-time scan are available/replicable in the on-demand scan.
You don't say what the avast detection was (malware name, etc.) ?
-
and if you post the scan link as requested, then avast lab has the option to fetch the file from VT as they can see the MD5 here
however, best option is to send it
submit a ticket and attach file >> https://support.avast.com/support/home
-
It was already tested - by me :) Virustotal says 100% clean, strange..
Not entirely strange as.
The VT scan is an on-demand scan not all of the functions in the on-demand real-time scan are available/replicable in the on-demand scan.
You don't say what the avast detection was (malware name, etc.) ?
Sorry, but I haven't Avast installed atm..
-
Sorry my bad, I didn't realise (or rather read) that you didn't have avast installed.
-
Malone, you are wrong.
at VT Qihoo also shows a detection.
-
Eddy, are you sure ? https://www.virustotal.com/cs/file/04446b25c01997d006b6b3d37ad37ff02cc0ef29cafe6e8c92f0d2ae371be11b/analysis/
-
Yes, I am sure.
I've downloaded 4 installers and submitted them and all 4 where flagged.
-
.NET4 application results: VirusTotal (https://www.virustotal.com/cs/file/9a5cbff30cb456dd750c5b7142927e4eaad973313bd132d736bc904b36742458/analysis/1453837421/), Metascan (https://www.metascan-online.com/#!/results/file/a271e7b317964cea97af94a9af8d18ec/regular)
Compiled into InnoSetup envelope using .NET version detection (http://kynosarges.org/DotNetVersion.html): VirusTotal (https://www.virustotal.com/cs/file/04446b25c01997d006b6b3d37ad37ff02cc0ef29cafe6e8c92f0d2ae371be11b/analysis/1453837674/), Metascan (https://live.metascan-online.com/#!/results/file/1c9e692fca2a40529303d1627d413e85/regular)
No threat found. Yet Avast is blocking our installer from proper work. One of users describes it as "I click on exe file a nothing will happen". I'm using competitors antivirus solution so I can't test it on my PC. But you can download it from Xzone here (http://www.xzone.cz/patche/LiS_CZ_Build19_E1-5.zip).
Customers of czech gameshop Xzone are very unhappy with this and I must warn them not to use Avast or give some exception to our installer before installation. We have no problems woth other common commercial antivirus solutions. Only Avast is problematic for more than a year. Similar behaviour was observed on previous projects from the same developer.
Out file is not a virus - .NET4 application search through registry to find location of Steam installation and then extract some files into game folders. We never had any issue with any other antivirus system except of Avast.
-
Yes, I am sure.
I've downloaded 4 installers and submitted them and all 4 where flagged.
What was flagged? Which installer?
-
We never had any issue with any other antivirus system except of Avast.
Report it using the link in my post above
-
What was flagged?
The installers.
Which installer?
All 4 that I've checked.
I see that the installers are not digitally signed.
That can be (not saying it is) the cause why avast isn't allowing them to run.
-
All 4 that I've checked.
maybe some scan links ...
-
Report it using the link in my post above
Removing a single file from some database doesn't solve anything. With next build issue will appear again. I need long term solution.
What was flagged?
The installers.
Which installer?
All 4 that I've checked.
We have much more installer on our site. Which did you test?
I see that the installers are not digitally signed.
That can be (not saying it is) the cause why avast isn't allowing them to run.
They are not digitally signed. Those files are compiled by me at home and distributed for free to videogame players. I have no money to spent on some expensive ceritificates and tools. If you know some free solution how to do it, please tell me.
-
Removing a single file from some database doesn't solve anything. With next build issue will appear again. I need long term solution.
Tell it to avast lab when they reply to your ticket ...
-
Report it using the link in my post above
#160115
Tell it to avast lab when they reply to your ticket ...
Will do.
-
As I said, I've tested 4 and all where flagged.
This is just one of them:
https://www.virustotal.com/en/file/8845acb595597a41c3e93715d90242dced3cd1d3262987d8426a410e57be571d/analysis/1453841133/
There are free ways to sign your files.
-
As I said, I've tested 4 and all where flagged.
This is just one of them:
https://www.virustotal.com/en/file/8845acb595597a41c3e93715d90242dced3cd1d3262987d8426a410e57be571d/analysis/1453841133/
Star Trek, Resident Evil 6 and Dead Space 3 are done by a different developer using different programming style. DS3 reports 0 problems, other two reports 1 problem. But I'm not complaining about those three. I'm having problems with our .NET4 installers.
I have found an old installer for Mass Effect 3 based on .NET3.5 is having 2 reports (https://www.virustotal.com/cs/file/f44c9ef49d4d5961cf2f12c099fca6efb2f4d8e8a762ec0a84b6cc0378a76e82/analysis/). I will replace him with a newer .NET4 version in the near future. Thanks for noticing.
But all .NET4 based installers having problems with Avast are clear. Sorted as they appear on our website (http://cestinybeta.rpgcitadela.cz/). All are clear:
Deus Ex The Fall (https://www.virustotal.com/cs/file/fe03a0b0a005a0b1034d918ef5eb88963d27afe29fcc83852ec5cab741b440e4/analysis/), Life is Strange (https://www.virustotal.com/cs/file/04446b25c01997d006b6b3d37ad37ff02cc0ef29cafe6e8c92f0d2ae371be11b/analysis/), Deus Ex Human Revolution Director's Cut (https://www.virustotal.com/cs/file/e80d5e83c81ab882dc37dd596a67de4aad9b060694a2e2205660e1c8c8c30717/analysis/), Dragon Age Origins (https://www.virustotal.com/cs/file/aecf2de21a2d8685025920242f91d9dc936133b06add99be8ab8636b16cba1a6/analysis/), Remember Me (https://www.virustotal.com/cs/file/0592be3921f2f57fc999f97c3b57529da9f8b67ea4f5b2163c1ee06f404c2003/analysis/), Deus Ex Human Revolution Missing Link (https://www.virustotal.com/cs/file/dcb747f7949a4d7165d576c29b27c2ea5ba063af69b0c70bbf073d8f49a117c1/analysis/1453845015/), Dragon Age II (https://www.virustotal.com/cs/file/4d0891d33c6ae92c5f047fe974e6e8cf52f0e57b6f5410dc8bd8987e70b01fde/analysis/1453845153/) and Deus Ex Human Revolution (https://www.virustotal.com/cs/file/8f08e60d2a0b4e3433eba36e43ff9a832624e37a8ad8aebd2ff22975cddb8366/analysis/1453844862/).
There are free ways to sign your files.
Please provide me with some link to a guide how to sign files for free please. I was unable to find them. I'm not a developer. I'm a tester and a localisation manager. Thank You.
-
http://tinyurl.com/hqfbncd
-
http://tinyurl.com/hqfbncd
First link - how to sign PDF documents
Second link - Learn how to Digitally Sign Files, Documents, Emails
3) How to Digitally Sign a document with Adobe Reader
4) PDF Signer Free – Digital Signature Software
5) Get or create your own digital signature - Office Support
6) How to Sign Documents and Fax Electronically [E-signatures]
7) + 8 ) Wikipedia
9) The 24 Best Apps to Digitally Sign, Scan and Fax Documents
10) Howto: Add a Digital Signature to a PDF File
Results: 0 relevant links on the first page. On other pages some links are suggesting buying some stuff from Microsoft and that is not free!
After more googling and changing search phrase I have found kSign (http://codesigning.ksoftware.net/) but it needs some PFX file with certificate. And I did not found where I can get one for free.
-
Hi all. I'm afraid I don't see any detection on those files. Could you provide us with a screenshot or more information about the problem?
Thank you for your cooperation.
-
Hi all. I'm afraid I don't see any detection on those files. Could you provide us with a screenshot or more information about the problem?
Thank you for your cooperation.
I'm not using Avast. But I have a lot of reports from users that they are unable to run our installer if Avast is present on theirs computer. After clicking on exe file nothing happens. No UI at all. If they disable Avast or put some exception on the file than it works as should (they can see UI and use the installer). We have no problems with competitors anitivirus solutions. Only Avast does that. We have encountered this before but this time we have a quite a lot of report of Avast blocking our installer. As you can see in my previous posts. All our .NET4 packages are all clear. No issue at all. Still Avast do not let them to run properly when released. It learns it somehow after a few days and makes no problems anymore on that specific file. But with a new build issue appears again. I can provide you with a new build if you need it for testing.
-
It sounds like Hardened mode to me. Please ask them to disable the "Hardened mode" (Režim uzamčení) in Settings and to try again.