Hi enigma,
I've read a lot about false-positive detection of files protected with enigma, however, I want to know more things..
1) What is IEEE? When will be available? Is it free?
2) Does code signing (thawte, verisign, comodo, etc) will turn my files clean?
3) What is better option: Wait for IEEE, Code sign my files or send a email to all anti-virus to put my files in a white-list?
Thanks.
About false positive
Re: About false positive
Hi johndoe,
IEEE is the Institute of Electrical and Electronics Engineers, located in USA. It started communication with the most famous software protection vendors and security software vendors (antiviruses) to find a compromise against false detections. Last years too much viruses are protected with packers which makes their analyzing more difficult, and so much false detections appeared for legal developers who use packers.
1. It is still in development, I think it will be finished within next half year or even sooner. Existing customers of Enigma Protector will get it for free.
2. Usually yes. But services provided by these companies are paid, you should pay them each year, but IEEE solution will be free, and it will never expire if you bought a protector.
3. For now, it is better to sign the code. It should solve problem very quickly. Code signing gives more advantages than just clean of false detections, so it is always recommended. But if you do not want to waste money for code signing services, just buy it for a year until IEEE solution will be made.
IEEE is the Institute of Electrical and Electronics Engineers, located in USA. It started communication with the most famous software protection vendors and security software vendors (antiviruses) to find a compromise against false detections. Last years too much viruses are protected with packers which makes their analyzing more difficult, and so much false detections appeared for legal developers who use packers.
1. It is still in development, I think it will be finished within next half year or even sooner. Existing customers of Enigma Protector will get it for free.
2. Usually yes. But services provided by these companies are paid, you should pay them each year, but IEEE solution will be free, and it will never expire if you bought a protector.
3. For now, it is better to sign the code. It should solve problem very quickly. Code signing gives more advantages than just clean of false detections, so it is always recommended. But if you do not want to waste money for code signing services, just buy it for a year until IEEE solution will be made.
Re: About false positive
Thanks enigma.
I'm willing to buy the code signing service.
What do you recommend? Thawte, VeriSign or Comodo?
Thank you
I'm willing to buy the code signing service.
What do you recommend? Thawte, VeriSign or Comodo?
Thank you
Re: About false positive
Not sure about Thawte...
I know that customers used/uses VeriSign and Comodo.
But Comodo cost 99$ per year, and VeriSign 499$, but advantages of both (regarding false detections) are same.
Use the cheaper one!
Also, please note, some files protected with CHECKUP-ControlSum are incompatible with the code signing, so probably, you will have to disable it in Enigma Protector.
I know that customers used/uses VeriSign and Comodo.
But Comodo cost 99$ per year, and VeriSign 499$, but advantages of both (regarding false detections) are same.
Use the cheaper one!
Also, please note, some files protected with CHECKUP-ControlSum are incompatible with the code signing, so probably, you will have to disable it in Enigma Protector.
Re: About false positive
Thank you enigma. I'll buy Comodo, of course.. hahah 