antivirus

Possible Duplicate: Antivirus False positive in my executable Until now, I had over 15 false virus alarms for my programs. Most of them were from Kaspersky, which reports ALWAYS the same virus: Trojan-GameThief.Win32.Lmir.pcd. There are 3 questions: Why it appears? How to prevent it? How to detect it? For the first question, because it detects always the same virus, I guess it is because one of my routines that I use in all my programs. But which one exactly, I don't know. For the second question I was thinking about modifying the program just a bit and recompiling it, just enough to change

I've seen it happen reasonably often: I write an application in Delphi and when I compile it, the virus-scanner tells me that I've created a virus and then immediately deletes the executable again. It's annoying but reasonable easy to fix by doing a full rebuild, deleting the *.dcu files first and sometimes by simply waiting. It happens with Delphi 6, 7, 2005 and 2007, as far as I know. And Symantec, Kaspersky, McAfee and NOD32 have all been guilty of reporting these false positives. I know it's because Delphi adds timestamps to its DCU files and these timestamps end up in the final executable

What is the least slow Virus scanner to use with Microsoft Visual Studio I have just had Microsoft Visual Studio “go slow” on me again due to my Virus Checker… (100s of Projects, some with over 100 C# files in them, so any thing that slows down builds is bad.) We all know that development tools do a lot of file access so are badly effect by Virus Scanner. Most of us have to run a Virus scanner due to do many reasons. So has anyone measured the effect of different virus scanners (and settings) on the speed of Microsoft Visual Studio? Has anyone tied Microsoft Security Essentials with Visual

I am trying to prevent that my application (an installer) will not be blocked by Windows SmartScreen Protection . I use BitRock and I signed my installer manually but I have always this problem. I bought a valid certificate and the signing with a timestamp is ok. It's a commercial application and I don't want that the user will be afraid to install it ps. I dont have an unknown publisher UPDATE : Similar issue for an MSI installer: How to avoid the Windows Defender SmartScreen prevented an unrecognized app from starting warning? Older discussion (recommended): How to pass the smart screen on

I'm building a web application in which I need to scan the user-uploaded files for viruses. Does anyone with experience in building something like this can provide information on how to get this up and running? I'm guessing antivirus software packages have APIs to access their functionality programatically, but it seems it's not easy to get a hand on the details. FYI, the application is written in C#. I would probably just make a system call to run an independent process to do the scan. There are a number of command-line AV engines out there from various vendors. Steve Important note before

I just ran into an annoying problem. Suddenly Avira AntiVir started to flag one executable from my software as being a virus. As the default action from almost any user is to click OK and Avira suggests to put the virus in quarantine, most of my users are deleting this executable. Well, let's not be arrogant and check if I'm not infected indeed. I posted the file to http://www.virustotal.com and from all anti virus only Avira flags it as infected. Furthermore I scanned my computer with two different anti viruses and it is clean. I already posted a mail to my users explaining what is happening

The subject says it all. A normal antivirus has to intercept all file accesses, scan the files and then optionally deny access to the file (possibly even displaying a prompt to the user). How can this be done? I'm aware of a method called API hooking, but that's a really dirty undocumented hack - and as such isn't really reliable. What's the "official" way of doing this? Alternatively, I would be interested in intercepting the loading of executable modules (.DLL, .EXE, etc.), not just arbitrary file reads. Andrew In the recent versions of windows (at least XP onwards) there is the concept