No code-compressing or obfuscating used.

> You mention code-signing above, but are you certain it's being done with a root certificate that the AVs trust?

How to do that? What certificate do you usually use / which signing software?