How Do I Properly Prevent Windows Installer Custom Actions from Windows Defender Detection?

Matt W 0 Reputation points
2023-09-29T14:35:57.1233333+00:00

Hi all,

I have a Windows Installer .msi generated by InstallShield and recently some customers have reported some items (Custom Actions) being flagged by Windows Defender.

  • SomeCustomAction.exe
  • AnotherCustomAction.dll
  • MSICEA7.tmp
  • MSI9ACD.tmp
  • MSIDC01.tmp

Would signing these utilities help to prevent being detected as potentially problematic?

The MSI*.tmp are also extracted actions and I guess I have to use some Windows Installer logging to hunt those down. My hope is that if digitally signing the install utilities might help, I may not have to worry about hunting those down by signing all utilities.

Any help in cleaning up the install/Defender experience, if possible, would be greatly appreciated!

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,783 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
8,475 questions
0 comments No comments
{count} votes