Author Topic: bassasio.dll false positive, code signing suggested  (Read 419 times)

pupdogg

  • Posts: 3
bassasio.dll is part of an app that we are currently developing and our prototype version works like a charm! however, bassasio.dll, is showing up as a trojan virus threat on the testing network. IT has suggested that if we code sign this file, they will permit it. slight problem though, after purchasing code signing certificate from digicert and signing the dll, our app ceases to come up. we have a built-in debugger to log an errors to an external log file and this file shows that everything started normally. this problem goes away when we replace the signed-bassasio.dll with standard unsigned bassasio.dll.

so, my question is do we need a special version of this dll to sign? pls advise. thank you!

Ian @ un4seen

  • Administrator
  • Posts: 22253
Re: bassasio.dll false positive, code signing suggested
« Reply #1 on: 29 Jul '19 - 12:57 »
That's strange, signing the DLL should work fine. For comparison, does your signed DLL work with the pre-compiled examples included in the BASSASIO package? (in the C\BIN folder)

pupdogg

  • Posts: 3
Re: bassasio.dll false positive, code signing suggested
« Reply #2 on: 7 Aug '19 - 02:39 »
Hi Ian, I have relayed your message to the developer. He advised the following:

Quote
The bassasio.dll you signed is a C/C++ dll.?? Now that it is signed, the .Net wrapper DLL Bass.Net.dll which MetricVision uses to access it realizes that it has changed and suspects bassasio.dll to be a virus or a Trojan and will not run.?? You will need to ask [/size]un4seen.com[/size] to compile us a new Bass.Net.dll for your signed bassasio.dll.


Would that be true? Or do you advise a different route?

Ian @ un4seen

  • Administrator
  • Posts: 22253
Re: bassasio.dll false positive, code signing suggested
« Reply #3 on: 7 Aug '19 - 13:24 »
That sounds like you may be using an old BASSASIO.DLL version. There was some tampering detection in the past (which would display a message like the one you describe) but it was removed in v1.3.1.