Why is Avast blocking an installer of czech localisation for videogames

Avast Free Antivirus / Premium Security
1

This behaviour was observed many times before by my users. I’n not using Avast so I do not have my own experinece. You can dowload installer packages on www.rpgcestiny.cz

Issue was observed today again on the latest installer I have sent to Xzone, biggest czech videogame store. See release notice with a download link here.

It’s a .NET4 application in an InnoSetup install envelope with a detection of installed .NET libraries. Here’s the source code.

What is the problem that Avast is blocking this installer and others antivirus solutions has no problem with that? I’m not a developer of the .NET4 application.

Best regards,
Marek Tvrdy

2

upload and test file here www.virustotal.com / www.metascan-online.com
if tested before, click rescan for a fresh result
Post link to scan result here

3

It was already tested - by me :slight_smile: Virustotal says 100% clean, strange…

4

Not entirely strange as.

The VT scan is an on-demand scan not all of the functions in the on-demand real-time scan are available/replicable in the on-demand scan.

You don’t say what the avast detection was (malware name, etc.) ?

5

and if you post the scan link as requested, then avast lab has the option to fetch the file from VT as they can see the MD5 here

however, best option is to send it
submit a ticket and attach file >> https://support.avast.com/support/home

6

Sorry, but I haven’t Avast installed atm…

7

Sorry my bad, I didn’t realise (or rather read) that you didn’t have avast installed.

8

Malone, you are wrong.

at VT Qihoo also shows a detection.

9

Eddy, are you sure ? https://www.virustotal.com/cs/file/04446b25c01997d006b6b3d37ad37ff02cc0ef29cafe6e8c92f0d2ae371be11b/analysis/

10

Yes, I am sure.
I’ve downloaded 4 installers and submitted them and all 4 where flagged.

11

.NET4 application results: VirusTotal, Metascan

Compiled into InnoSetup envelope using .NET version detection: VirusTotal, Metascan

No threat found. Yet Avast is blocking our installer from proper work. One of users describes it as “I click on exe file a nothing will happen”. I’m using competitors antivirus solution so I can’t test it on my PC. But you can download it from Xzone here.

Customers of czech gameshop Xzone are very unhappy with this and I must warn them not to use Avast or give some exception to our installer before installation. We have no problems woth other common commercial antivirus solutions. Only Avast is problematic for more than a year. Similar behaviour was observed on previous projects from the same developer.

Out file is not a virus - .NET4 application search through registry to find location of Steam installation and then extract some files into game folders. We never had any issue with any other antivirus system except of Avast.

12

What was flagged? Which installer?

13
We never had any issue with any other antivirus system except of Avast.
Report it using the link in my post above
14
What was flagged?
The installers.
Which installer?
All 4 that I've checked.

I see that the installers are not digitally signed.
That can be (not saying it is) the cause why avast isn’t allowing them to run.

15
All 4 that I've checked.
maybe some scan links ...
16

Removing a single file from some database doesn’t solve anything. With next build issue will appear again. I need long term solution.

We have much more installer on our site. Which did you test?

They are not digitally signed. Those files are compiled by me at home and distributed for free to videogame players. I have no money to spent on some expensive ceritificates and tools. If you know some free solution how to do it, please tell me.

17
Removing a single file from some database doesn't solve anything. With next build issue will appear again. I need long term solution.
Tell it to avast lab when they reply to your ticket ...
18

#160115

Will do.

19

As I said, I’ve tested 4 and all where flagged.

This is just one of them:
https://www.virustotal.com/en/file/8845acb595597a41c3e93715d90242dced3cd1d3262987d8426a410e57be571d/analysis/1453841133/

There are free ways to sign your files.

20

Star Trek, Resident Evil 6 and Dead Space 3 are done by a different developer using different programming style. DS3 reports 0 problems, other two reports 1 problem. But I’m not complaining about those three. I’m having problems with our .NET4 installers.

I have found an old installer for Mass Effect 3 based on .NET3.5 is having 2 reports. I will replace him with a newer .NET4 version in the near future. Thanks for noticing.

But all .NET4 based installers having problems with Avast are clear. Sorted as they appear on our website. All are clear:
Deus Ex The Fall, Life is Strange, Deus Ex Human Revolution Director’s Cut, Dragon Age Origins, Remember Me, Deus Ex Human Revolution Missing Link, Dragon Age II and Deus Ex Human Revolution.

Please provide me with some link to a guide how to sign files for free please. I was unable to find them. I’m not a developer. I’m a tester and a localisation manager. Thank You.