Win32:Dorder-G [Trj] reported in self-extracting exe file
Posted: Thu Dec 17, 2015 9:56 pm
by pfoster

I use the free version of Installaware X3 in Visual Studio 2013 community edition running on Windows 8 in VMware Player 6.0.7. After I create the self-extracting installer for a Windows Forms project, my Avast anti-virus program immediately quarantines the exe installer file with a warning that it contains the above Trojan. I can extract the contents of the installer exe into an empty folder using 7zip and run the Avast anti-virus program on its contents without getting any virus warnings. I haven't I added any code or files to my project that contain virus code definitions. I use simple NET 3.5 assemblies and nothing that causes Avast problems. Is there a problem with the free Visual Studio version of Installaware X3? I don't have to distribute the installer exe to other windows users, but it would be nice if it didn't "trick" my virus scanner.
Re: Win32:Dorder-G [Trj] reported in self-extracting exe fil
Posted: Fri Dec 18, 2015 4:08 am
by bokkie
Good morning.
I recall some of us have had problems with Avast previously where it detects the installation exe as a false-positive. I don't think there was a 100% successful resolution except to test your exe on a machine where there's no anti-virus suite running or installed. Something I also recall was to notify the anti-virus company to remove the false-positive from their list of known signatures but that's possibly easier to say than to achieve. I really don't think it's anything to do with X3 directly.