Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.basic.visual.misc > #1929 > unrolled thread

After Install/Run antivirus software classifies my EXEs as 'suspicious'

Started byGS <gs@somewhere.net>
First post2013-12-19 21:33 -0500
Last post2013-12-23 12:09 -0700
Articles 20 on this page of 61 — 11 participants

Back to article view | Back to comp.lang.basic.visual.misc


Contents

  After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 21:33 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-19 21:41 -0600
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:03 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 22:59 -0700
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-19 23:06 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:48 -0500
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 08:32 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 10:39 -0600
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 18:09 -0500
              Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 17:22 -0600
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 13:05 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Farnsworth" <nospam@nospam.com> - 2013-12-20 00:01 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 14:50 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 23:02 -0700
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2013-12-20 08:29 +0100
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 12:57 -0500
    a/v report GS <gs@somewhere.net> - 2013-12-20 13:16 -0500
      Re: a/v report "Farnsworth" <nospam@nospam.com> - 2013-12-20 14:21 -0500
        Re: a/v report GS <gs@somewhere.net> - 2013-12-20 14:28 -0500
          Re: a/v report "CoderX" <coder@x.com> - 2013-12-22 12:57 -0500
          Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
      Re: a/v report "Brian Kelly" <Brian@mcmail.com.not> - 2013-12-20 20:52 +0000
        Re: a/v report GS <gs@somewhere.net> - 2013-12-20 16:08 -0500
          Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-21 12:36 +0100
            Re: a/v report ralph <nt_consulting@yahoo.com> - 2013-12-21 07:12 -0600
              Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
            Re: a/v report GS <gs@somewhere.net> - 2013-12-21 10:54 -0500
            Re: a/v report ObiWan <obiwan@mvps.org> - 2013-12-22 18:08 +0100
              Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:11 +0100
    VirusTotal report GS <gs@somewhere.net> - 2013-12-20 14:34 -0500
      Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-22 12:59 -0500
        Re: VirusTotal report Tony Toews <ttoews@telusplanet.net> - 2013-12-22 12:52 -0700
          Re: VirusTotal report GS <gs@somewhere.net> - 2013-12-22 19:51 -0500
            Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:57 -0500
          Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:59 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 17:28 +0530
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 09:08 -0500
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 10:59 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 14:53 -0500
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:06 -0500
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:40 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 22:58 +0530
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 13:43 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 09:08 +0000
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 03:04 -0700
              Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 10:24 +0000
                Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 11:42 -0500
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 11:25 -0600
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 12:48 -0500
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:08 -0700
                      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 13:54 -0600
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:06 -0700
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 15:15 -0500
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 14:49 +0000
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:03 +0100
                      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 15:06 +0000
                        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:17 +0100
                          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2014-01-04 23:23 -0700
                            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-05 17:09 +0100
                Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 11:58 -0700
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:09 -0700

Page 3 of 4 — ← Prev page 1 2 [3] 4  Next page →


#1961

FromGS <gs@somewhere.net>
Date2013-12-21 16:40 -0500
Message-ID<l951sd$ath$1@dont-email.me>
In reply to#1959
I just saw an option labeled DeepScreen in the a/v section of 
Avast>Settings. I checked this and removed the location from Exclusions 
and it had no effect (still get blocked)!

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1957

From"Abhishek" <abhishek007p@hotmail.com>
Date2013-12-21 22:58 +0530
Message-ID<l94j49$hup$1@dont-email.me>
In reply to#1952
another workaround is to digitally sign the file. but sumitting to AV 
companies do work, once they know its a false positive they will update 
their signature and in the next update your app wont be flaged as malware. 
it usually takes few days.


"Abhishek" <abhishek007p@hotmail.com> wrote in message 
news:l93vpf$4dr$1@dont-email.me...
| It is a false positive, and quite common, you need to report it to the AV
| company to get it resolved. you can also scan you exe using virustotal.com
|
| Possible Reaons for false positive -
| * compressing the exe using a exe complressor
| * downloading files from internet and opening them without user consent
| * using some kind of trial schemes
| * working with memory directly
|
| you need to find out the code which is causing the problem, rewrite it or
| remove it. that is the only way forward.
|
| --
| Abhishek P
| http://vb6zone.blogspot.com
|
|
|
| "GS" <gs@somewhere.net> wrote in message 
news:l90a9j$n0l$1@dont-email.me...
|| What does other installed apps have that prevents antivirus software
|| from blocking them? I have a problem with being blocked regardless of
|| where the app is located. Is there a standard 'flag' that needs
|| setting, at design time, or registration action required on install?
||
|| -- 
|| Garry
||
|| Free usenet access at http://www.eternal-september.org
|| Classic VB Users Regroup!
||  comp.lang.basic.visual.misc
||  microsoft.public.vb.general.discussion
||
||
||
|| ---
|| This email is free from viruses and malware because avast! Antivirus
| protection is active.
|| http://www.avast.com
||
|
| 

[toc] | [prev] | [next] | [standalone]


#1958

FromGS <gs@somewhere.net>
Date2013-12-21 13:43 -0500
Message-ID<l94nh9$dnh$1@dont-email.me>
In reply to#1957
> another workaround is to digitally sign the file. but sumitting to AV
> companies do work, once they know its a false positive they will 
> update
> their signature and in the next update your app wont be flaged as 
> malware.
> it usually takes few days.

That's only good for the current compile, and so NOT a long-term fix 
because updates get a new signature!

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1967

FromDeanna Earley <dee.earley@icode.co.uk>
Date2013-12-23 09:08 +0000
Message-ID<l98uj7$3ki$1@speranza.aioe.org>
In reply to#1958
On 21/12/2013 18:43, GS wrote:
>> another workaround is to digitally sign the file. but sumitting to AV
>> companies do work, once they know its a false positive they will update
>> their signature and in the next update your app wont be flaged as
>> malware.
>> it usually takes few days.
>
> That's only good for the current compile, and so NOT a long-term fix
> because updates get a new signature!

I presumed they meant code signing. The certificate/signature will be 
the same, the hash however will be different.
They can then whitelist (if they're nice) the code signing certificate 
itself.

-- 
Deanna Earley (dee.earley@icode.co.uk)
iCatcher Development Team
http://www.icode.co.uk/icatcher/

iCode Systems

(Replies direct to my email address will be ignored. Please reply to the 
group.)

[toc] | [prev] | [next] | [standalone]


#1968

FromTony Toews <ttoews@telusplanet.net>
Date2013-12-23 03:04 -0700
Message-ID<al2gb95lduft9mtirsb9f031rj8khjptr7@4ax.com>
In reply to#1967
On Mon, 23 Dec 2013 09:08:58 +0000, Deanna Earley
<dee.earley@icode.co.uk> wrote:
  
>I presumed they meant code signing. The certificate/signature will be 
>the same, the hash however will be different.
>They can then whitelist (if they're nice) the code signing certificate 
>itself.

Until a new cert issued.  <sigh>

Tony

[toc] | [prev] | [next] | [standalone]


#1969

FromDeanna Earley <dee.earley@icode.co.uk>
Date2013-12-23 10:24 +0000
Message-ID<l99317$e0k$2@speranza.aioe.org>
In reply to#1968
On 23/12/2013 10:04, Tony Toews wrote:
> On Mon, 23 Dec 2013 09:08:58 +0000, Deanna Earley
> <dee.earley@icode.co.uk> wrote:
>
>> I presumed they meant code signing. The certificate/signature will be
>> the same, the hash however will be different.
>> They can then whitelist (if they're nice) the code signing certificate
>> itself.
>
> Until a new cert issued.  <sigh>

We would you keep getting new certificates?
We don't plan on buying a new certificate all the time.
The one we have is good enough, and will be valid until it is revoked.

-- 
Deanna Earley (dee.earley@icode.co.uk)
iCatcher Development Team
http://www.icode.co.uk/icatcher/

iCode Systems

(Replies direct to my email address will be ignored. Please reply to the 
group.)

[toc] | [prev] | [next] | [standalone]


#1970

FromGS <gs@somewhere.net>
Date2013-12-23 11:42 -0500
Message-ID<l99p6k$cf$1@dont-email.me>
In reply to#1969
> We would you keep getting new certificates?
> We don't plan on buying a new certificate all the time.
> The one we have is good enough, and will be valid until it is 
> revoked.

Thanks, Deanna!

I was not aware that a cert is used since the a/v vendor mentions a 
hash sum. Could this be due to the fact I don't have a cert?

Where/who did you get yours from?

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1971

Fromralph <nt_consulting@yahoo.com>
Date2013-12-23 11:25 -0600
Message-ID<iergb9lv8rd7j5a0f1mke36cgkt7vp179i@4ax.com>
In reply to#1970
On Mon, 23 Dec 2013 11:42:58 -0500, GS <gs@somewhere.net> wrote:

>> We would you keep getting new certificates?
>> We don't plan on buying a new certificate all the time.
>> The one we have is good enough, and will be valid until it is 
>> revoked.
>
>Thanks, Deanna!
>
>I was not aware that a cert is used since the a/v vendor mentions a 
>hash sum. Could this be due to the fact I don't have a cert?
>
>Where/who did you get yours from?

Digitally signing software products is something one really needs to
do a lot research before purchase, if they are a small ISV.

You can actually "digitally sign" your own software for free. The
other products basically recognize your signature universally. But
even then there can be issues. For example, you might buy a product,
but while 'certified', that certificate isn't necessary 'recognized'
by Microsoft.

Prices have stabilized over the years among the main players, but the
range is still extreme - $90 to $1400 - average around $300??

Probably start a fight here, but unless $300 a year is no big deal,
then I suggest a beginning ISV to digitally sign on their own.
(Remember create one and keep one, for your company, forever.)
Customer had to have a certain amount of trust or they would never
have installed your software in the first place. The 'message'
bascially changes from *no signature* to *unknown signature*, "Do you
want to trust this company".

-ralph

[toc] | [prev] | [next] | [standalone]


#1972

FromGS <gs@somewhere.net>
Date2013-12-23 12:48 -0500
Message-ID<l99t10$p3a$1@dont-email.me>
In reply to#1971
> On Mon, 23 Dec 2013 11:42:58 -0500, GS <gs@somewhere.net> wrote:
>
>>> We would you keep getting new certificates?
>>> We don't plan on buying a new certificate all the time.
>>> The one we have is good enough, and will be valid until it is 
>>> revoked.
>> 
>> Thanks, Deanna!
>> 
>> I was not aware that a cert is used since the a/v vendor mentions a 
>> hash sum. Could this be due to the fact I don't have a cert?
>> 
>> Where/who did you get yours from?
>
> Digitally signing software products is something one really needs to
> do a lot research before purchase, if they are a small ISV.
>
> You can actually "digitally sign" your own software for free. The
> other products basically recognize your signature universally. But
> even then there can be issues. For example, you might buy a product,
> but while 'certified', that certificate isn't necessary 'recognized'
> by Microsoft.
>
> Prices have stabilized over the years among the main players, but the
> range is still extreme - $90 to $1400 - average around $300??
>
> Probably start a fight here, but unless $300 a year is no big deal,
> then I suggest a beginning ISV to digitally sign on their own.
> (Remember create one and keep one, for your company, forever.)
> Customer had to have a certain amount of trust or they would never
> have installed your software in the first place. The 'message'
> bascially changes from *no signature* to *unknown signature*, "Do you
> want to trust this company".
>
> -ralph

Thanks, Ralph! That's very helpful. I self-cert my VBA projects but 
those need to be renewed periodically because they expire. I'm in favor 
of doing same for my VB6 projects and so will appreciate any tips 
toward that...

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1975

FromTony Toews <ttoews@telusplanet.net>
Date2013-12-23 12:08 -0700
Message-ID<pe2hb9t0l55ip97c5fpmblao378rb8cg8d@4ax.com>
In reply to#1971
On Mon, 23 Dec 2013 11:25:58 -0600, ralph <nt_consulting@yahoo.com>
wrote:
  
>Digitally signing software products is something one really needs to
>do a lot research before purchase, if they are a small ISV.

Why?

>You can actually "digitally sign" your own software for free. 

Trouble is the clients IT department would likely have to install your
cert for you.  And they wouldn't want to do that.   A lot easier to
buy it.

Tony

[toc] | [prev] | [next] | [standalone]


#1977

Fromralph <nt_consulting@yahoo.com>
Date2013-12-23 13:54 -0600
Message-ID<6s4hb910i6gtgo3caslfrfdmm320vug4ju@4ax.com>
In reply to#1975
On Mon, 23 Dec 2013 12:08:34 -0700, Tony Toews
<ttoews@telusplanet.net> wrote:

>On Mon, 23 Dec 2013 11:25:58 -0600, ralph <nt_consulting@yahoo.com>
>wrote:
>  
>>Digitally signing software products is something one really needs to
>>do a lot research before purchase, if they are a small ISV.
>
>Why?

Because there are too many Gotchas, and too many prices. 

>
>>You can actually "digitally sign" your own software for free. 
>
>Trouble is the clients IT department would likely have to install your
>cert for you.  And they wouldn't want to do that.   A lot easier to
>buy it.
>

Exactly. 

And for that "easier" you pay $$$ a year.
A cost of doing business in the Information Age, if you can 'cost' it,
fine, but make sure of vendor and whether it is really worth it , or
it is just money down the drain.

-ralph

[toc] | [prev] | [next] | [standalone]


#1974

FromTony Toews <ttoews@telusplanet.net>
Date2013-12-23 12:06 -0700
Message-ID<sv1hb9516ab9605o19on3mcatf2dmtomhu@4ax.com>
In reply to#1970
On Mon, 23 Dec 2013 11:42:58 -0500, GS <gs@somewhere.net> wrote:
  
>Where/who did you get yours from?

Cheapest code signing I found was
http://codesigning.ksoftware.net/

My first few were for my trade name business and the latest one was in
my name.

To create the VB6 exe I use the following in a CMD file

"C:\Program Files (x86)\Microsoft Visual Studio 6\VB98\vb6.exe" /make
startmdb
"C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Bin\signtool"
sign /t http://timestamp.comodoca.com/authenticode /v startmdb.exe

I'm having trouble locating my notes on signtool.   But it took me
hours of digging to come up with the appropriate utility and the above
signtool line.

Tony

[toc] | [prev] | [next] | [standalone]


#1978

FromGS <gs@somewhere.net>
Date2013-12-23 15:15 -0500
Message-ID<l9a5kl$f88$1@dont-email.me>
In reply to#1974
> On Mon, 23 Dec 2013 11:42:58 -0500, GS <gs@somewhere.net> wrote:
>   
>> Where/who did you get yours from?
>
> Cheapest code signing I found was
> http://codesigning.ksoftware.net/
>
> My first few were for my trade name business and the latest one was 
> in my name.
>
> To create the VB6 exe I use the following in a CMD file
>
> "C:\Program Files (x86)\Microsoft Visual Studio 6\VB98\vb6.exe" /make
> startmdb
> "C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Bin\signtool"
> sign /t http://timestamp.comodoca.com/authenticode /v startmdb.exe
>
> I'm having trouble locating my notes on signtool.   But it took me
> hours of digging to come up with the appropriate utility and the 
> above signtool line.
>
> Tony

Thanks, Tony! I got lots of hits on google. As I mentioned in my reply 
to Ralph, I'm inclined to go the self-cert route as I do with my VBA 
projects. I just don't do enough commercial work to justify a repeat 
cost for this.<g>

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1986

FromDeanna Earley <dee.earley@icode.co.uk>
Date2014-01-02 14:49 +0000
Message-ID<la3u9n$m2$1@speranza.aioe.org>
In reply to#1974
On 23/12/2013 19:06, Tony Toews wrote:
> To create the VB6 exe I use the following in a CMD file
>
> "C:\Program Files (x86)\Microsoft Visual Studio 6\VB98\vb6.exe" /make
> startmdb
> "C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Bin\signtool"
> sign /t http://timestamp.comodoca.com/authenticode /v startmdb.exe
>
> I'm having trouble locating my notes on signtool.   But it took me
> hours of digging to come up with the appropriate utility and the above
> signtool line.

I do the same but specify a certificate store file:
signtool.exe" sign /f "pathtocert.pfx" /p ubersecurepassword /t 
http://timestamp.comodoca.com/authenticode /v pathtoapp.exe

-- 
Deanna Earley (dee.earley@icode.co.uk)
iCatcher Development Team
http://www.icode.co.uk/icatcher/

iCode Systems

(Replies direct to my email address will be ignored. Please reply to the 
group.)

[toc] | [prev] | [next] | [standalone]


#1988

FromObiWan <obiwan@mvps.org>
Date2014-01-02 16:03 +0100
Message-ID<20140102160349.00004c9d@albasani.net>
In reply to#1974
> I'm having trouble locating my notes on signtool.   But it took me
> hours of digging to come up with the appropriate utility and the above
> signtool line.

Late at the party but... Tony, given that others may have the same
trouble; what about a small tool (maybe written in VB6 :D) allowing to
sign an exe; the tool may just save settings into some "ini" file or
the like and spawn "signtool" when needed; heck, it may even add an
entry to the explorer context menu to sign files ;-) !!

[toc] | [prev] | [next] | [standalone]


#1989

FromDeanna Earley <dee.earley@icode.co.uk>
Date2014-01-02 15:06 +0000
Message-ID<la3v9g$3oo$1@speranza.aioe.org>
In reply to#1988
On 02/01/2014 15:03, ObiWan wrote:
>
>> I'm having trouble locating my notes on signtool.   But it took me
>> hours of digging to come up with the appropriate utility and the above
>> signtool line.
>
> Late at the party but... Tony, given that others may have the same
> trouble; what about a small tool (maybe written in VB6 :D) allowing to
> sign an exe; the tool may just save settings into some "ini" file or
> the like and spawn "signtool" when needed; heck, it may even add an
> entry to the explorer context menu to sign files ;-) !!

I call mine a batch file :)
Easily editable and infinitely customisable!

-- 
Deanna Earley (dee.earley@icode.co.uk)
iCatcher Development Team
http://www.icode.co.uk/icatcher/

iCode Systems

(Replies direct to my email address will be ignored. Please reply to the 
group.)

[toc] | [prev] | [next] | [standalone]


#1990

FromObiWan <obiwan@mvps.org>
Date2014-01-02 16:17 +0100
Message-ID<20140102161754.00007c24@albasani.net>
In reply to#1989
> >> I'm having trouble locating my notes on signtool.   But it took me
> >> hours of digging to come up with the appropriate utility and the
> >> above signtool line.

> > Late at the party but... Tony, given that others may have the same
> > trouble; what about a small tool (maybe written in VB6 :D) allowing
> > to sign an exe; the tool may just save settings into some "ini"
> > file or the like and spawn "signtool" when needed; heck, it may
> > even add an entry to the explorer context menu to sign files ;-) !!
 
> I call mine a batch file :)
> Easily editable and infinitely customisable!

well, that's a solution, sure :D ! But then, for the lazy ones or the
clueless ones, a small exe (optionally opensourced :D) may be a nice
thing... with a browse button to find the app, dropdowns lists for the
options... and then more, including a context-menu "sign this exe" :D

[toc] | [prev] | [next] | [standalone]


#1991

FromTony Toews <ttoews@telusplanet.net>
Date2014-01-04 23:23 -0700
Message-ID<seuhc9lj0id7pgintbrebef80jjko9vs6h@4ax.com>
In reply to#1990
On Thu, 2 Jan 2014 16:17:54 +0100, ObiWan <obiwan@mvps.org> wrote:
  
>well, that's a solution, sure :D ! But then, for the lazy ones or the
>clueless ones, a small exe (optionally opensourced :D) may be a nice
>thing... with a browse button to find the app, dropdowns lists for the
>options... and then more, including a context-menu "sign this exe" :D

Go for it.   

As Deanna states a CMD file works for me.  As it is customizable my
CMD also deletes the exe first before running the make just to ensure
that I don't have some kind of compile failure and run an old version
of an exe.

(But then I ran a DOS based Fidonet BBS so batch files are rather easy
for me.)

Tony

[toc] | [prev] | [next] | [standalone]


#1992

FromObiWan <obiwan@mvps.org>
Date2014-01-05 17:09 +0100
Message-ID<20140105170932.000003bc@albasani.net>
In reply to#1991
> >well, that's a solution, sure :D ! But then, for the lazy ones or the
> >clueless ones, a small exe (optionally opensourced :D) may be a nice
> >thing... with a browse button to find the app, dropdowns lists for
> >the options... and then more, including a context-menu "sign this
> >exe" :D
> 
> Go for it.   

well...

http://www.ntwind.com/tutorials/code-signing-from-explorer-context-menu.html

:)
 
> (But then I ran a DOS based Fidonet BBS so batch files are rather easy
> for me.)

Oh, no problems with batch files here (although lately I prefer using
"vbs" for the same tasks - lightweight but more powerful :D) the idea
was just to put together some simple, small app to help signing exes

[toc] | [prev] | [next] | [standalone]


#1973

FromTony Toews <ttoews@telusplanet.net>
Date2013-12-23 11:58 -0700
Message-ID<pt1hb9td35n3oulrl8462fofe0ucv8824h@4ax.com>
In reply to#1969
On Mon, 23 Dec 2013 10:24:41 +0000, Deanna Earley
<dee.earley@icode.co.uk> wrote:

>>> I presumed they meant code signing. The certificate/signature will be
>>> the same, the hash however will be different.
>>> They can then whitelist (if they're nice) the code signing certificate
>>> itself.
>>
>> Until a new cert issued.  <sigh>
>
>We would you keep getting new certificates?
>We don't plan on buying a new certificate all the time.
>The one we have is good enough, and will be valid until it is revoked.

Annually or every three years depending on how much you pay.

Tony

[toc] | [prev] | [next] | [standalone]


Page 3 of 4 — ← Prev page 1 2 [3] 4  Next page →

Back to top | Article view | comp.lang.basic.visual.misc


csiph-web