antivirus

Antivirus False positive in my executable

这一生的挚爱 提交于 2019-11-26 08:20:33
问题 I just ran into an annoying problem. Suddenly Avira AntiVir started to flag one executable from my software as being a virus. As the default action from almost any user is to click OK and Avira suggests to put the virus in quarantine, most of my users are deleting this executable. Well, let\'s not be arrogant and check if I\'m not infected indeed. I posted the file to http://www.virustotal.com and from all anti virus only Avira flags it as infected. Furthermore I scanned my computer with two

Program made with PyInstaller now seen as a Trojan Horse by AVG

℡╲_俬逩灬. 提交于 2019-11-26 06:47:02
问题 About a month ago, I used PyInstaller and Inno Setup to produce an installer for my Python 3 script. My AVG Business Edition AntiVirus just started complaining with today\'s update that the program has an SCGeneric Trojan Horse in the main .exe file used to start the program (in the folder created by PyInstaller that has all of the Python \"guts\"). At first I just thought it was a false positive in AVG, but submitting the .exe file to VirusTotal I get this analysis: https://virustotal.com/en

How does a Windows antivirus hook into the file access process?

血红的双手。 提交于 2019-11-26 06:35:32
问题 The subject says it all. A normal antivirus has to intercept all file accesses, scan the files and then optionally deny access to the file (possibly even displaying a prompt to the user). How can this be done? I\'m aware of a method called API hooking, but that\'s a really dirty undocumented hack - and as such isn\'t really reliable. What\'s the \"official\" way of doing this? Alternatively, I would be interested in intercepting the loading of executable modules (.DLL, .EXE, etc.), not just

Detect Antivirus on Windows using C# [closed]

只愿长相守 提交于 2019-11-26 03:54:21
问题 Closed . This question needs to be more focused. It is not currently accepting answers. Want to improve this question? Update the question so it focuses on one problem only by editing this post. Closed last year . Is there a way to detect whether there is an antivirus software installed in a machine using C#? I know the Security Center detects antivirus software but how can you detect that in C#? 回答1: According to Microsoft, The Windows Security Center uses a two-tiered approach for detection