White lists and false positives
I represent a small software company that sells Windows software as electronic downloads. Lately, Symantec products flag our products as potential threats upon detections be so called "crowd intelligence" based algorithms, such as WS.Reputation, WS.Suspicious cloud and similar. We have reported the false positives and applied for white listing. These are always approved by Symantec, but don't seem to have any effect in reality. Our installers are signed using a certificate issued by Thawte. Obviously, this is very harmful for our business. My question is, how can we possibly avoid these false positives? Are Symantec trying to push their own certificates using their dominance in the virus protection market and would it help to purchase a certificte issued by Symantec?
Stian Aagedal (Acon AS)