debug executables flagged as malware?

[mlh5953]

@holly7787: I used an older version of Acrobat Reader to create one.

Unfortunately the new version doesn't seem to include it.

[holly7787]

Maybe this will be useful, i've followed this guide from stackoverflow:

Microsoft recommends using the PowerShell Cmdlet New-SelfSignedCertificate.

1. Generate the key:
   

   New-SelfSignedCertificate -DnsName email@yourdomain.com -Type CodeSigning -CertStoreLocation cert:\CurrentUser\My​

2. Export the certificate without the private key:
   

   Export-Certificate -Cert (Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert)[0] -FilePath code_signing.crt​

   
   The [0] will make this work for cases when you have more than one certificate... Obviously make the index match the certificate you want to use... or use a way to filtrate (by thumprint or issuer).
3. Import it as Trusted Publisher
   

   Import-Certificate -FilePath .\code_signing.crt -Cert Cert:\CurrentUser\TrustedPublisher​

4. Import it as a Root certificate authority.
   

   Import-Certificate -FilePath .\code_signing.crt -Cert Cert:\CurrentUser\Root​

5. Sign the script (assuming here it's named script.ps1, fix the path accordingly).
   

   Set-AuthenticodeSignature .\script.ps1 -Certificate (Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert)​

   
   Obviously once you have setup the key, you can simply sign any other scripts with it.

in CVI i open "Build" -> "Target Settings..." -> "Signing Info..." and selected the new certificate

[rolfk]

Many of those virus scanners are similar to a virus too. And often a real resource hog too. Real viruses usually try to be mean and lean as it reduces the risk of detection but that’s about all the difference there is. 😀

[RobertoBozzolo]

Several anti virus program work also on the reputation of the executables, and since our programs are normally working only in one or a few instances they are flagged as "possibly malicious" due to the reduce number of installations.

This is particularly annoying when developing an application, since the debug executable the IDE creates when executing the program is different  every time and every time I have my antivirus complaining about it! 🙄

[rolfk]

Signing your executable definitely should increase its reputation score significantly and hopefully high enough that those virus scare programs don't complain anymore.