Fix virus scanner alerts

[deinhofer]

Problem

Some virus scanner, e.g Avast, blame a virus when starting the installer (.exe?) for Asterics Ergo.
Some other virus scanner don't blame, e.g. Sophos.

Solution
Contact vendors of virus scanner and try to register installer or flag it as false positive.

[klues]

i think the only thing we can do is to write to the most used antivirus-companys (or send them the file as a false positive) and hope, that they will whitelist us...
two quite recent statistics about most used antivirus software:
https://www.statista.com/statistics/271048/market-share-held-by-antivirus-vendors-for-windows-systems/
https://www.av-comparatives.org/wp-content/uploads/2016/02/security_survey2016_en.pdf (http://prntscr.com/gsbrin )

so I think we should at least concentrate on:

1. Kaspersky
2. ESET
3. Avast
   which seem to be the most used according to statistics... (and if possible more, of course)

[deinhofer]

Ok, I can do this.

[klues]

I've created a list where we can track tests with AV-software and monitor the status of requests to AV-companies (feel free to change things, add colums):
https://docs.google.com/spreadsheets/d/1pJtGeN2v4KcjaepLP0tnMcPcKLSNv15zJOL3CMQw9tA/edit?usp=sharing

[deinhofer]

Regarding the warning message on windows 10 (Windows Defender):
This could be related to the fact the AsTeRICS Ergo is not signed and hence is treated as untrusted.

--> Sign installer with an AsTeRICS certificate?

[klues]

Regarding Windows SmartScreen Defender:
Its very strange how it works, I have tested these cases:

• 3.2.3.exe --> copied from other PC to Downloads-Folder -> no warning
• 3.2.3(1).exe --> fresh download from github --> warning
• 3.3.0.exe --> fresh download from github --> warning
• rename 3.2.3(1).exe to 3.2.3.exe --> no warning
• copy everything to desktop or USB-drive and start from there --> no warnings

according to:
https://stackoverflow.com/questions/12311203/how-to-pass-the-smart-screen-on-win8-when-install-a-signed-application
it is somehow possible to validate a program and report the result to microsoft - maybe as a result the warning disappears?!

[klues]

Tried to do something with "Windows Application Verifier", but the only result after starting "analyzing" AsTeRICS-Ergo with it was that it did not start anymore with "AsTeRICS-Ergo.exe" :(

[klues]

by now we will "fix" this issue by adding a FAQ regarding virus-scanners - see #8

[stefaniehoechtl]

I added the FAQ regarding the antivirus programs to the master branch.

[klues]

FAQ regarding antivirus is added, so I'll close this issue.

[deinhofer]

Maybe we should consider this regarding the "Untrusted application" message on Window 10:
https://social.technet.microsoft.com/wiki/contents/articles/32288.windows-enforcement-of-sha1-certificates.aspx
and also see InnoSetup release notes 5.5.8:
http://www.jrsoftware.org/files/is5-whatsnew.htm

[klues]

i'll reopen this in order to try out @deinhofer 's new comment. but I'll assign this issue a lower priorty.