3

I am working on a windows application. After creating the installer file i.e. MSI, it gets installed and works perfectly however, once i upload it on cloud server and try downloading it from there and install it, i get the warning message saying "Microsoft Defender Smart Screen Prevented an unrecognized app from starting. Running this app might put your PC at risk" (below screen).

Any help would be greatly appreciated!!!

enter image description here

Devesh Tiwari
  • 85
  • 1
  • 12
  • Get a certificate and Sign it – TheGeneral Jul 28 '20 at 08:13
  • Click on the `More info` , a button on the bottom will appear to continue. If you want to avoid this you need to sign your application with a trusted certificate. – lordvlad30 Jul 28 '20 at 08:19
  • Please see this answer: [Digital Signing & SmartScreen](https://stackoverflow.com/questions/50407893/how-to-add-publisher-in-installshield-2018/50414337#50414337). – Stein Åsmul Jul 28 '20 at 14:21

2 Answers2

1

I have linked to an answer above. Might summarize quickly:

  1. Digital Signature: You need an EV-Certificate to sign your setup to gain "trust outright" (Interesting concept?).
  2. False Positive Check: Run your binary through false-positive detection by checking with multiple anti-virus software. This site is a great help: https://www.virustotal.com. Another one you can try is: https://opentip.kaspersky.com/ (Threat Intelligence Portal). For further resources, search for "malware" here: https://www.installdude.com/jumpgate.php
  3. Flagged Downloaded File: You might also want to make sure the file is not flagged as downloaded from another computer:

Unblock

Please check the linked answer for more details (don't want to create too many similar answers - "dual source problem" - hard to keep updated): How to add publisher in Installshield 2018.

Stein Åsmul
  • 39,960
  • 25
  • 91
  • 164
1

You can just submit your software to Microsoft for malware analysis https://www.microsoft.com/en-us/wdsi/filesubmission

Basically they scan the file, and establish reputation. It works even with Self-Signed Code certificates.

Adriks
  • 41
  • 1
  • 1
    Have you see this actually work? As in have you submittet a file and seen it go from blocked to be reported OK? – Stein Åsmul Mar 03 '21 at 18:45
  • [I found your other answer](https://stackoverflow.com/a/66462106/129130). Is there a cost for this for your own products? – Stein Åsmul Mar 03 '21 at 18:59