PDA

View Full Version : OT: Code-signing can help...



NewsArchive
09-06-2013, 09:31 AM
I hate it so much when this happens. Our internal automated license
registration systems worked fine and without any source code modification
for more that six years now. This system handles the serial number and
subscription key stuff for all SetupBuilder users worldwide and is located
in a protected folder.

One hour ago, avast! Internet Security downloaded a new virus definition
update and suddenly, the license registration system failed with "This
application has failed to start because yadayada.dll was not found.
Re-installing the application may fix this problem."

Hmmm, it turned out that !avast simply REMOVES ("false-positive") one
component from the protected folder. And of course, it does not help to
restore the file from a backup -- avast! "re-removes" the file immediately.
Adding the file to the scan exclusion list does not help either.

What the F*@#. So what to do now? It turned out that this component (a
Visual Studio written DLL) was not code-signed. But we had a code-signed
equivalent available (very same version, code-signed a few seconds after the
compile date).

BINGO. That worked fine and we are back in business. Code-signing
application files can help :-)

Yes - I do hate computers!!!! <bg>

Friedrich

NewsArchive
09-06-2013, 09:33 AM
makes me love avast also (so protective that you cannot even protect
your work) :(

code sign all your exe's and dll's used!

good example Fredrich

--
JP
__________________________________________________ _____

For those who do not understand ... : "Qui bene amat bene castigat."
__________________________________________________ _____

DMC - Data Management Center : a tool to let you Migrate Import Export
Transfer your Data
www.dmc-fr.com

NewsArchive
09-07-2013, 10:37 AM
I have a small exe (code signed) that opens a small window then calls my
main exe. Then it closes itself with a timer just to keep the operator
amused while the main program opens.

Avast did the same to this program. No response back from Avast.

Friedrich I believe the world would be a better, happie and safer place
without computers. <G>

Lynn Howard

NewsArchive
09-07-2013, 10:37 AM
Friedrich

Glad to see you run into a gotcha occasionally. Makes us mortals feel
better. <g>
When ever I run into avast, I immediately go to their exceptions list and
put everything I can
think of in it...

Dan

NewsArchive
09-07-2013, 10:37 AM
Computers never lie, but they are always wrong!

--

Russ Eggen
RADFusion International, LLC

NewsArchive
09-07-2013, 10:38 AM
Friedrich,

that leads me to to question, has SV in the meanwhile code-signed their own DLLs?

Wolfgang Orth

NewsArchive
09-07-2013, 10:38 AM
Last time I looked, yes.

--

Russ Eggen
RADFusion International, LLC

NewsArchive
09-17-2013, 12:58 AM
Hi Friedrich,

> What the F*@#. So what to do now? It turned out that this component (a
> Visual Studio written DLL) was not code-signed. But we had a code-signed
> equivalent available (very same version, code-signed a few seconds after the
> compile date).
>
> BINGO. That worked fine and we are back in business. Code-signing
> application files can help :-)

It is amazing how much software is out there that isn't code-signed.
I'm to a point now that unless I know where it's from I'm reluctant to
even consider installing something that isn't signed.

Best regards,

Arnor Baldvinsson