Windows Defender detects malware in DMD

Re:Windows Defender detects malware in DMD by pm215 on Wednesday October 31, 2018 @04:27PM (#18349010)

The problem is that it isn't really something the project can fix -- the problem is with the antivirus, whose vendors aren't very responsive. See for instance the PuTTY devs' todo list item about virus false-positives: https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/... -- persistently every release gets falsely flagged by something or other, even if they do make a report and get it taken off the list it comes back for the next release, and at least one of the antivirus programs seems to be looking for the putty binary specifically!

[ Parent | on HN ]

Re:Windows Defender detects malware in DMD by hermitdev on Wednesday October 31, 2018 @06:09PM (#18349653)

Part of the problem with this is how some AVs rate new binaries. Previous job, we had issues with deployments of new versions. Most of our (only) corporate clients used Symantec. They would consistently flag our app as a possible virus because it's "reputation" was low. To Symantec, reputation basically meant how many times it'd seen the app before.

Symantec basically coerced us into buying a code-signing cert from them, and we still had to submit every build directly to them for this reputation issue to go away. Royal pain in the ass.

[ Parent | on HN ]

Re:Windows Defender detects malware in DMD by platinumrad on Wednesday October 31, 2018 @06:34PM (#18349775)

Sounds like a racket, to be honest. Can't say that I'm sad that their reputation, along with the reputation of traditional AV vendors as a whole, is in the dumpster these days.

[ Parent | on HN ]

Re:Windows Defender detects malware in DMD by hermitdev on Wednesday October 31, 2018 @08:50PM (#18350577)

It is most definitely a racket, and their "repuation" score severely affected our reputation with existing clients.

Same deployment procedure as had been for years (we'd previously been code-signing with a GoDaddy cert) with Click-Once deployment (was a .Net Office add-in), all of a sudden we start getting dinged.

The cost to the company (a relatively small company) was significant. Had to buy a Symantec code-signing cert (~$900), had to ditch ClickOnce and invest in InstallShield (don't recall the license cost) and engineer the installer to both sign the installed libs & the installer itself. All of this because Symantec hadn't seen the new libs enough because, well, we targeted a smaller corporate audience (for argument sake, we had around a 100 clients, of which, each would only have 1 or 2 installs of this particular app).

[ Parent | on HN ]