如何通过Windows Defender SmartScreen保护？ [英] How to pass the Windows Defender SmartScreen Protection?

问题描述

我试图防止我的应用程序（安装程序）被 Windows SmartScreen Protection 阻止。

我使用BitRock和我手动签署了安装程序的签名，但始终遇到此问题。我购买了有效的证书，并且可以使用时间戳签名。

这是一个商业应用程序，我不希望用户担心会安装它 p>

ps。我没有未知的发布者

解决方案

更新：针对MSI安装程序的类似问题：如何避免Windows Defender SmartScreen阻止无法识别的应用程序发出警告？

较早的讨论（推荐）：如何在Win8上传递智能屏幕

此处是另一篇文章： 如何在Installshi中添加发布者产生于2018年 （可能会更好）。

---

评论时间太长。这是一个EXE文件？想到的只是几件事，尽管我怀疑它们是否会解决问题-但这是一个开始的地方。

顺便说一句：我想您已经与 BitRock支持？ （ Installbuilder ）。

假阳性&被阻止的文件

1. 是否已通过将EXE安装程序上传到 virustotal.com 来确定它是否被标记为已知的不安全文件？ （无论出于何种原因）- virustotal.com 对您的计算机运行60多种安全软件扫描程序上传的二进制文件。

   
   
   
   
   

   • 我肯定会尝试验证。可能是BitRock安装程序文件通常被标记为不安全-就我所知。

   
   

   • 此类误报可能是一个非常严重的部署问题，因为安全软件阻止了您的安装-每个安全软件本身就是一个问题，您有时不知道在哪里解决该问题-您与谁联系？首先是BitRock-但这可能不是问题。

   
   

   • 要超越EXE安装程序和检查正在运行的应用程序是否存在误报，您可以尝试使用使用此方法。 rel = nofollow noreferrer> Sysinternals 。首先安装您的应用，然后按照说明启动Process Explorer，并针对 virustotal.com 检查所有正在运行的二进制文件。

   
   



2. 当您从互联网上下载安装程序并尝试运行该安装程序时，是否会显示此对话框？还是直接从您的本地版本直接发生在文件中？

   
   
   
   
   
   • 从互联网下载后，文件将具有备用数据流<值为 3 的code> Zone.Identifier 表示该文件是从Internet下载的。这会触发安全警告。
   
   
   • 您可以删除此流。您可以使用Powershell或转到文件的属性页面来取消阻止文件：
     
     
     
     
     • Powershell ：< a href = https://docs.microsoft.com/zh-cn/powershell/module/microsoft.powershell.utility/unblock-file?view=powershell-6 rel = nofollow noreferrer>取消阻止文件。
     
     
     • 在 Windows资源管理器中：右键单击文件，转到属性并删除障碍（朝对话框底部）。我认为此对话框在不同的Windows版本中略有不同。有时，按钮取消阻止，有时需要选中一个复选框，然后按 OK 或应用。
     
     
   
   

这两个建议都不可能解决您的问题，但是请发表评论，并在我们掌握更多信息后让我们尝试演变此答案。

某些链接：

• 对可执行文件进行签名是否会阻止SmartScreen警告用户？


• 如何阻止安装程序触发Windows 10的此应用已被屏蔽以保护您错误？ ？
  
  
  
  
  • >此特殊答案值得阅读 （证书不够，需要信誉）。
  
  

I am trying to prevent that my application (an installer) will not be blocked by Windows SmartScreen Protection.

I use BitRock and I signed my installer manually but I have always this problem. I bought a valid certificate and the signing with a timestamp is ok.

It's a commercial application and I don't want that the user will be afraid to install it

ps. I dont have an unknown publisher

解决方案

UPDATE: Similar issue for an MSI installer: How to avoid the Windows Defender SmartScreen prevented an unrecognized app from starting warning?

Older discussion (recommended): How to pass the smart screen on Win8 when install a signed application?

Another writeup here: How to add publisher in Installshield 2018 (might be better).

---

Too long for a comment. This is an EXE file? Just a couple of things come to mind, though I doubt they will resolve the issue - but a place to start.

BTW: I assume you have contacted BitRock support? (Installbuilder).

False Positives & Blocked Files

1. Have you checked by uploading your EXE installer to virustotal.com to determine if it is flagged as a known unsafe file? (for whatever reason) - virustotal.com runs 60+ security software scanners against your uploaded binary.

   • I would definitely try this to verify. It could be that BitRock installer files are flagged as unsafe in general - for all I know.

   • Such "false positives" can be a very serious deployment problem as security software block your install - and each security software is a problem in its own right, and you sometimes don't know where to beging to resolve it - who do you contact? BitRock first of all - but this may not be the problem.

   • To go beyond the EXE installer and check your running app for false positives, you can try this approach using Process Explorer from Sysinternals. First install your app, then launch Process Explorer as described and check all your running binaries against virustotal.com.

2. Does this dialog show up when you try to run the installer after it has been downloaded from the Internet? Or does it happen outright to the file straight from your local build?

   • When downloaded from the internet the file will have an alternate data stream Zone.Identifier with a value of 3 indicating that the file was downloaded from the Internet. This triggers security warnings.
   • You can remove this stream. You can unblock the file using Powershell or by going to the file's property page:
     • Powershell: Unblock-File.
     • In Windows Explorer: right click the file, go to Properties and remove the blocking (towards the bottom of the dialog). I think this dialog is slightly different in different Windows versions. Sometimes a button Unblock and other times a check box you need to check and then hit OK or Apply.

Neither of these two suggestions are likely to solve your problem, but please comment and let us try to "evolve" this answer once we have more information available.

Some Links:

• How to pass the smart screen on Win8 when install a signed application?
• Will signing an executable prevent SmartScreen from warning the user?
• How can I stop my installer from triggering Windows 10's "This app has been blocked for your protection" error?
  • This particular answer recommended as worth a read (certificates are not enough, reputation is needed).

这篇关于如何通过Windows Defender SmartScreen保护？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！