While I know my programs aren't signed, I am not sure I believe that be the cause. At ;east not completely. That would make antivirus programs completely worthless if they simply blocked any program not digitally signed.
I think the specific cause is unsigned exe's that contain zipforge bundled. The hash offsetter did not use to set off antivirus software till after zipforge was bundled into the exe. I have noticed a similar pattern with your software which my customers use; those that contain zipforge bundled are the ones that usually set people off.
