Convincing AntiVirsus, im not a virus

Started by
55 comments, last by dsm1891 8 years, 7 months ago

Hello,

I have recently wrote a tool which reads in .json files and merges them together, then outputs the result. Unfortunately multiple antivirus' do not like the program writing to a file (Avast and Microsoft Security Essentials). If I disable the antivirus, my program is free to create the output file.

I thought/hoped that in release mode, my program would be free of these restraints, but even after installing the program, it is still being flagged.

Is there something I can do to allow my program to write to files?

Mobile Developer at PawPrint Games ltd.

(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)

(Although I am mobile. no, not as in a babies mobile, I move from place to place)

(Not "place" as in fish, but location.)

Advertisement

ph34r.png

Don't use shitty anti viruses.

unfortunately I do not determine which Antivirus the user has.

I don't think saying "Incompatible with shitty anti viruses." when the user downloads/buys the program is an option.

Mobile Developer at PawPrint Games ltd.

(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)

(Although I am mobile. no, not as in a babies mobile, I move from place to place)

(Not "place" as in fish, but location.)

I had the same problem with Avast. I had to turn off part of the program to make it stop flagging my programs.


unfortunately I do not determine which Antivirus the user has.



I don't think saying "Incompatible with shitty anti viruses." when the user downloads/buys the program is an option.

Ok, I wasn't sure in the original question whether you were referring to your PC, or PCs in general - in the former case, you can just whitelist your application in the antivirus (unless its really so shitty it doesn't even have that option ;) ), but for ALL PCs, its a little more complicated. If, as you said, multiple antiviruses all flagged your application, there has to be some common component triggering that behaviour, so you might be able to find that out and possibly alter it.

Aside from that, maybe contact the manufacturers customer support, and see if they can do anything (like making adjustments to their detection routine, to produce less false-flags like your application; though I can't say how likely that is to happen)?

Does your program work fine until it tries to write to the file? What's the file you're trying to write to? Is it in an unusual location, or a location that has specific access rights which your program doesn't have?

What kinds of runtime/API/libraries does your program use/include? These might affect the virus scanners.

Does your program use an installer, or do you just run it directly from your download folder?

Is UAC in its default setting on the computer?

I use MSE and have never had it falsely trigger for one of my apps, and I read/write files of all kinds. There might be something really unusual you're doing(?)


unfortunately I do not determine which Antivirus the user has.



I don't think saying "Incompatible with shitty anti viruses." when the user downloads/buys the program is an option.

Ok, I wasn't sure in the original question whether you were referring to your PC, or PCs in general - in the former case, you can just whitelist your application in the antivirus (unless its really so shitty it doesn't even have that option ;) ), but for ALL PCs, its a little more complicated. If, as you said, multiple antiviruses all flagged your application, there has to be some common component triggering that behaviour, so you might be able to find that out and possibly alter it.

Aside from that, maybe contact the manufacturers customer support, and see if they can do anything (like making adjustments to their detection routine, to produce less false-flags like your application; though I can't say how likely that is to happen)?

It was the latter. (sorry)

I have already debugged, The only part of the program which does not run as expected is the writing to a file.


	std::ofstream outfile("Output//Merged.json", std::ofstream::binary);
	int len = json.length();
	char * buff = new char[len];
	memcpy(buff, json.c_str(), sizeof(char) * len);
	outfile.write(buff, len);
	outfile.close();

(I have tried multiple extensions and methods of writing)

:/

only library I am using is RapidJson

I am running under admin permissions

Mobile Developer at PawPrint Games ltd.

(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)

(Although I am mobile. no, not as in a babies mobile, I move from place to place)

(Not "place" as in fish, but location.)

You're using two forward slashes - try using one forward slash OR two backslashes, but not two forward slashes.


It was the latter. (sorry)

If found this stackoverflow-article, from someone that had the same problem like you:

http://stackoverflow.com/questions/14375340/my-programs-are-blocked-by-avast-anti-virus

So appearently you can eigther digitally sign your code (costs), or really just contact the anti-virus manufactures and have them whitelist your file (probably only makes sense after a release).

You're using two forward slashes - try using one forward slash OR two backslashes, but not two forward slashes.

sorry, that was a typo in the code

Mobile Developer at PawPrint Games ltd.

(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)

(Although I am mobile. no, not as in a babies mobile, I move from place to place)

(Not "place" as in fish, but location.)

This topic is closed to new replies.

Advertisement