[RESOLVED] Undesireable SmartScreen Filter message

[EntityX]

I have an application that I'm attempting to sell. It's a free download that comes with trial minutes but if you download it you see a message that would tend to discourage people from downloading it. Maybe someone has some experience with this. Here's a screenshot of what you see when you try to download my application. Part of the message says, "SmartScreen Filter has little or no information about this unsigned program." When it says unsigned does that mean you have to purchase a certificate from Verisign or some place like that to have a signed program?

Is there a way you can contact the people who manage SmartScreen Filter and present your application so they can test it and see that it is safe to download?

[EntityX]

I've determined that I'm going to get my application digitally signed. That's a start. I found that the code signing certificates vary in price quite a bit but some Certification Authorities sell them for around $ 170 per year if you purchase 3 years of certification. That won't get rid of the message, "this program is not commonly downloaded and could harm your computer", but it won't say that it's an unsigned program if I have it signed. I can then start to work on getting rid of the other message.

I sent an email to Microsoft support about this and got this reply.

Thank you for your inquiry regarding Windows Internet Explorer's SmartScreen® Filter. The goal of the Application Reputation service is to warn users, when appropriate, that a download is more likely to be unsafe.



Reputation is established by how your download is used by the Internet Explorer consumer and the SmartScreen® Service intelligence algorithms. Downloads are assigned a reputation rating based on many criteria, such as download traffic, download history, past anti-virus results and URL reputation. This reputation may be based on the downloaded program or can also be assigned to the publisher, based on digital certificate information. Downloads that are digitally signed allow a publisher’s reputation to be applied to all of their signed downloads.



As an application developer or publisher, there are industry best practices that will affect your download's reputation. To help establish your application's reputation, consider doing the following:



Digitally sign your programs with an Authenticode signature

Reputation is generated and assigned to digital certificates as well as specific files. Digital certificates allow data to be aggregated and assigned to a single certificate rather than many individual programs. For that reason, Microsoft always recommends that publishers sign all applications with the same digital certificate to help better expedite reputation gains. Note: Any Authenticode Certificate issued by a Certificate Authority (CA) that is a member of the Windows Root Certificate Program (including either Verisign or Thawt) can establish reputation with our service. For more information about code signing, refer to http://msdn.microsoft.com/en-us/wind.../gg487309.aspx.



Ensure downloads are not detected as malware

Downloaded programs that are detected and confirmed as malware will affect both the download’s reputation and the reputation of the digital certificate.



Apply for a Windows Logo

To learn more about the Windows Logo visit the Windows 7 Logo Program page on MSDN.



We are confident that products developed using these industry best practices will establish a positive download experience. In the meantime, consumers can still click through to run the download. To do so, they select Actions | More Options | Run Anyway from Download Manager. For more information about the feature, refer to SmartScreen® Filter Frequently Asked Questions.



Thank you,



SmartScreen® Filter Support Team

I'm thinking that once I get my application signed I might start a new thread for the purpose of trying to get rid of the "This program is not commonly downloaded message...". If there are other VBForums members that are working to get rid of that message we could help each other out. First get your application signed and then you can start building reputation so that you eventually get rid of that message for those people that are using IE8 or 9 and have the SmartScreen Filter turned on. If we download each others software then our reputation will build up sooner. If you're a repected VBForums member then very likely your software will be safe to download.

Edit Entry 8-6-11 :
I found that you can get a code signing certificate for under $ 100 per year. By far the best price that I've found.

http://codesigning.ksoftware.net/

[EntityX]

After getting a code signing certificate and signing my application the SmartScreen Filter message no longer said it was an unsigned program but it still said "This program might harm you computer. SmartScreen Filter has little or no information about this program. Running this program might harm you computer."

It's been signed for a while now and I guess there've been enough downloads so that it no longer gives that message. When I download my software I no longer see that message using IE9 or IE8. I can't speak for anyone else though. If you want to get rid of such a message for your program get it signed and then when enough downloads have taken place without anyone reporting problems you should see it disappear.