Note: I submitted the Burn engine to the major AV vendors about a year ago so 
they could avoid false positives. Submitting your own Bundle to the AV vendors 
may help them better recognize Burn as non-malware.

_______________________________________________________________
 FireGiant  |  Dedicated support for the WiX toolset  |  
http://www.firegiant.com/

-----Original Message-----
From: Phill Hogland [mailto:phogl...@rimage.com] 
Sent: Friday, August 22, 2014 7:41 AM
To: wix-users@lists.sourceforge.net
Subject: Re: [WiX-users] Antivirus is blocking execution of standard 
bootstrapper application

About a year ago, while using Wix 3.8 RTM and VS2010, building the default 
bootstrapper project with minimal changes to define the manufacture and add a 
MsiPackage to the chain, resulted in the Bundle.exe being deleted within 
seconds of being compiled by Samantec Endpoint Connection.  A False-positive 
report was filed.  When code signing was added to the Bundle.exe the problem 
was avoided.  I do not recall the Samantec Trojan..... name ot the Samantec URL 
which explained that the heuristics used is more likely to consider a file 
which is not Authenticode Signed as malware.  (And of course they would be 
happy for customers to buy a certificate from Samantec-Verisign, rather than a 
competitor).  Other anti-virus programs also use heuristics which are more 
likely to consider an unsigned file as malware.  As others have pointed out, 
not signing a bundle is only one possible reason for it to be flagged as 
malware.
http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Burn-bootstrapper-Application-Installation-td7583982.html#a7586959

I am currently using Wix 3.9, VS2013, and an updated version of Samantec 
Endpoint Protection.  When I build the default bootstrapper project, so far SEP 
has not deleted the output bundle.exe.



--
View this message in context: 
http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Antivirus-is-blocking-execution-of-standard-bootstrapper-application-tp7596457p7596482.html
Sent from the wix-users mailing list archive at Nabble.com.

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to