Page 1 of 1

About false positive

Posted: Tue Mar 13, 2012 12:47 pm
by johndoe
Hi enigma,
I've read a lot about false-positive detection of files protected with enigma, however, I want to know more things..

1) What is IEEE? When will be available? Is it free?
2) Does code signing (thawte, verisign, comodo, etc) will turn my files clean?
3) What is better option: Wait for IEEE, Code sign my files or send a email to all anti-virus to put my files in a white-list?

Thanks.

Re: About false positive

Posted: Tue Mar 13, 2012 2:20 pm
by Enigma
Hi johndoe,

IEEE is the Institute of Electrical and Electronics Engineers, located in USA. It started communication with the most famous software protection vendors and security software vendors (antiviruses) to find a compromise against false detections. Last years too much viruses are protected with packers which makes their analyzing more difficult, and so much false detections appeared for legal developers who use packers.

1. It is still in development, I think it will be finished within next half year or even sooner. Existing customers of Enigma Protector will get it for free.
2. Usually yes. But services provided by these companies are paid, you should pay them each year, but IEEE solution will be free, and it will never expire if you bought a protector.
3. For now, it is better to sign the code. It should solve problem very quickly. Code signing gives more advantages than just clean of false detections, so it is always recommended. But if you do not want to waste money for code signing services, just buy it for a year until IEEE solution will be made.

Re: About false positive

Posted: Wed Mar 14, 2012 12:14 pm
by johndoe
Thanks enigma.
I'm willing to buy the code signing service.
What do you recommend? Thawte, VeriSign or Comodo?

Thank you

Re: About false positive

Posted: Wed Mar 14, 2012 12:31 pm
by Enigma
Not sure about Thawte...

I know that customers used/uses VeriSign and Comodo.

But Comodo cost 99$ per year, and VeriSign 499$, but advantages of both (regarding false detections) are same.

Use the cheaper one!

Also, please note, some files protected with CHECKUP-ControlSum are incompatible with the code signing, so probably, you will have to disable it in Enigma Protector.

Re: About false positive

Posted: Wed Mar 14, 2012 4:52 pm
by johndoe
Thank you enigma. I'll buy Comodo, of course.. hahah :lol: