Why The Exe Icon of Order the Chaos Versions 1.02 Is Left Intact

First I thought that my computer was under constant virus attack, but after working offline and after several full cleanings/checkings with F-Secure Safe, I finally found the answer why my AV considered my final main executable of Order the Chaos games as a virus.

The exe made with BlitzMax was always clean. Next I changed the exe icon with Resource Hacker, then protected the file with Enigma Protector. As the protecting was ready, my AV deleted the resulting file immediately considering it a virus.

The ”diagnosis” was ”SYMMI”/generic malware. Before publishing I wanted to be sure that my AV doesn’t find anything harmful from the installation package.

What was the solution? First I tried to protect all the resources (also icon and version) from Enigma Protector’s (the licensing system) options. My other computer’s AV found the installation package 100% clean after that, but on my desktop computer there is different version of F-Secure’s AV and it considered the main executable still a potential risk, because its behavior was similar to a virus.

The key was the changing of the main executable’s icon. I left it as Windows ”standard exe icon” and as a result of not changing the exe icon my both versions of F-Secure’s AV considered the whole installation packages 100% clean.

The exe icons differ from the other icons and require some ”hacking”. We’ll see at the future, if Order the Chaos games can have changed exe icon with protection of Enigma Protector. EP uses some kind of virtual system and with changed exe icons my executables were considered as potential viruses (generic detection / false positive)…

But as said above, the solution was keep the exe icon intact.

Though, I haven’t paid for the certificate, that is why smart screen at first blocks the games.