IDP.Generic & quarantine when we release a new version

[iroda]

Hi,

Our company develops several software in Delphi language (RAD Studio). At our partners, the AVAST FREE version finds IDP.GENERIC virus almost every time after installation, so it quarantines it. It is a very annoying behavior as our programs are of course virus free. There are times when we release a new version several times a week and AVAST randomly either quarantines it or not. What can we do? Our customers are very nervous and annoyed. Many people are already thinking about choosing another software if the phenomenon does not go away, because this only happens with our software and the eSzemélyi Kliens software manufactured by ID&Trust in Hungary. The operation of AVAST interferes with the work of our customers (they cannot start the program because AVAST quarantines it) and harms us by constantly marking a program that is guaranteed to be non-viral as false positive. When restored from quarantine, it often happens that the shortcut is not restored, so the intervention of our company is always necessary to restore the original state. If customers choose other software due to a malfunction of AVAST, AVAST will cause material damage to our company. How to fix this malfunction? Will AVAST pay for the material damage caused to us?

[Pondus]

https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

[igor]

Are the executable modules digitally signed?

[iroda]

https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

Unfortulately it is not a good solution that every time when a new version is published we have to put it to the white list or we have to send it to check by someone if it is false positive. E.g. if on a day at 11 p.m. a new version is published and then I send it somewhere to check, it is sure that it will be investigated in 3-4 hours before the first client downloads the new version next day? Can anybody guarantee it?

[iroda]

Are the executable modules digitally signed?

No.

[igor]

Then I'd strongly suggest to start signing your files. With a digital signature, you can sign up for whitelisting based on the certificate.

[iroda]

I need more information. Where can I subscribe to this whitelist, what information is needed? If I sign up for a whitelist based on a certificate, does AVAST guarantee me that if I release a new software version, AVAST will not quarantine it? Neither during installation nor later? Does the digital signature have to be a signature certified by an official service provider, or can it be one created by the company itself? I need to know the answers before taking any further steps.

[Asyn]

-> https://support.avast.com/article/229/
-> https://support.avast.com/article/228/