Google Chrome: file is malicious

Question

But it's a lie

I ran into this problem with my installer: The exe installer, when downloading from websites in Chrome, is marked as malware.

To overcome this problem, we tried to change the domain names, but this is not a permanent solution.

Even after signing my exe with a Thawte certificate, the flag still exists.

I looked through my exe with all the popular AV files and there is nothing malicious about it.

How can I get rid of this chrome flag?

Answer 1

The webmaster does nothing to help with the false positive result of the installers. All he does is tell you that the file is potentially malicious, without giving you any way to appeal or request a review of their results. With FireFox and Chrome, and others, using this data, you would think that Google would give you the opportunity to appeal. The irony is that the company is launching a false positive initiative, as Microsoft is the worst offender in creating false positives.

Answer 2

You may be able to work around this problem by submitting your site URL in Google’s Webmaster Tools. You don’t even need to provide a URL for each “malicious” file; a generic top-level URL for your site (or for your small Blogger.com corner) seems adequate.

If you have a Google account, just log in and go to this URL . There is a noticeable text box with the "Add Site" button next to it, which does the trick. It worked for me in a matter of minutes (and I don't have a “certificate”, besides what I got to win the Pre-K raft).

Oh, and I also have experience in heuristics, as part of my degree. "Heuristics" is actually just what ordinary, simple people call "rules of thumb"!

Answer 3

Maybe Chrome uses heuristic analysis to determine if this file is “malicious”. That is, it basically says: "Since this file has these qualities, we believe that this file is harmful."

Considering that a few years ago, someone took possession of the root certification authority and started creating real security certificates (so that people were not suspicious, but because they were really authentic, browsers would not notify the user) for their sites that requested personal data (bank name and password, etc.), and stole it until this authority was canceled a few days later.

Therefore, just having a .exe with a certificate (genuine, which of course you have) will not be sufficient for Chrome for two reasons.

Sorry, I can’t tell you how to get rid of (or at least slightly alleviate) this problem, but I thought it would be useful if you had some possible reasons why this is happening.

** EDIT: sources for backing up my applications: http://news.techworld.com/security/3266817/online-fraudsters-issue-fake-security-certificates-for-google-yahoo/

http://www.bbc.co.uk/news/technology-14819257 **

I also have experience in heuristics as part of my degree in programming.