8 replies to this topic

[a_catalin]

Hi.
I use Delphi 7.
I searched the forum before asking but I could not find any relevant informations about this.
I made a program who generates some exe files. The problem is that there are antiviruses who detects some of them as false positives.
I reported them as false positives but this is not a good long term solution.
The support teams for these antiviruses suggested that I should digitally sign them. This way the rate of false positive detection will be reduced.
The problem is that I don't know anything about how to do that...
Could somebody help me...?
Thank you in advance.

Regards, Catalin

[dargueta]

Introduction to Code Signing (Windows)

[a_catalin]

Thank you but what I meant to say is that I don't know how to digitally sign a file using Delphi code.

[dargueta]

You sign the executable itself, not the code. Unless you want to write a program in Delphi that signs other stuff? What IDE and/or compiler do you use?

[a_catalin]

I know that you sign a file not the code.
In my first post I wrote that it's about signing the exe files generated by my program.
Also I wrote that I use Delphi 7.
Those exe files are stored as a "template" in resources; the user adds icon(s), info and some parameters.

[dargueta]

Unless I'm missing something here, the language isn't the same as the IDE...

[WingedPanther]

For Delphi, the language and IDE are tightly integrated. As a result, "Delphi 7" refers to both a language version and the corresponding IDE version.

[dargueta]

So I was missing something. In this case I suggest you write a batch program that, given some parameters, will call a publicly-available software signing program that'll for each target file.

[LuthfiHakim]

Your problem actually not caused by unsigned executable. But by the behavior of your program. Many antivirus check if a program extracts something from inside it (like you storing "template" exe inside your main exe resource section, customize it, then store in disk). Blindly many of them think this is you spreading malwares.

Signing the executable perhaps will ease the "accusation". So you may try to sign the main executable (the one that contain "template" executable). If your template exe does not have this behavior, the antivirus will not complaint (unless it has other "accusable" behavior). So it does not necessary to sign it.