Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I downloaded "java development kit" from my college computer, the computer that I used to download the software was full of virus and malware. I scanned the software with antivirus program the software was ok . I checked the software properties and there was a Digital signature on the software.

Digital Signature snapshot

So I wanted to ask following 2 questions :

  1. Does a digital signature on application guarantees that it has not been infected by virus or altered by any means ?

  2. Is it possible that the digital signature remains intact even after the software get infected by virus ?

share|improve this question
up vote 2 down vote accepted

Yes, it is possible, but it is highly unlikely that you will be affected by such a thing. It does, happen, however.

A digital signature does not guarantee that a program is free from malware - yes, it's supposed to, but if someone cracks into a database and steals digital signatures / certificates they can sign whatever they please. If the verification path can be trusted, then a digital signature will tell whether the integrity of the program is compromised (i.e., the program has been modified after it was signed).

share|improve this answer
    
… or if somebody breaks into Oracle and infects their software just before they sign it. – Scott Dec 11 '12 at 18:09
    
@ekaj ok i got it . so here in my case, the computer that i used to download the application was infected by virus, however application's digital signature is ok . so is there any chance that executable is infected ? – Torpido Dec 12 '12 at 6:27
    
!) Did you download the JDK (Java Development Kit) from Oracle? 2), you might find this read on false positives interesting and helpful in your situation - service1.symantec.com/sarc/sarc.nsf/info/html/… – cutrightjm Dec 12 '12 at 6:41

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .