1

I have a small program which converts some data files between different versions of a game (Age of Empires 2). It requires some dll libraries such as boost and a few additional data files. I would like to pack these into a self-extracting archive for a one-click installation. I've tried using both WinRar and the built-in Iexpress of Windows. The archive itself works fine, however it seems to trigger some virus warnings.

Here is the actual program: https://www.virustotal.com/de/file/aa06bd9eb77f2414a149e7312dcfbd70cfc6fb2f4888a385b3d00c55c32118cd/analysis/

And this is the packaged archive: https://www.virustotal.com/de/file/1e4272798163031fca982d5433b7e9c3c8378abb02cece9889384cef28f20cfc/analysis/

Is there an accepted way to do this without triggering false positives or should I stick to distributing it as a normal zip Archive?

  • 1
    One of the best ways to avoid this is to digitally sign the application including the archives you distribute it in. (.msi is just a scripted archive format) – Ramhound Apr 13 '17 at 12:24
  • 1
    Ramhound is right. Unfortunately, digital signatures are not cheap. – user477799 Apr 13 '17 at 12:26
  • 1
    It's a purely non-commercial/hobby project so I don't really want to spend a lot of money on it. I guess I'll stick to distributing it as a zip. – Jineapple Apr 16 '17 at 12:58
0

There are some tricks you can do to decrease the detection ratio. For example use WinRar 3. It will trigger less false positives. You can also use a 64 bit SFX header instead of 32 bit.

Source:
http://thesunstroke.blogspot.de/2017/11/false-antivirus-reports-on-installers.html

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.