What should I do when the application that I wrote (its installation file) is marked as a virus / trojan?

I wrote a download manager (in AutoHotKey language) for the client, and it is marked with fewer anti-virus scanners (11% of the scanners used in VirusTotal) as a Trojan, malware, dropper, data thief, etc. Since my software is none of this, I would like to correct the mislabeling of these scanners. Has anyone dealt with such problems before?

The real complication is that since this is a download manager, the actual signed binary that I deliver is different for each of the thousands of downloads, so it is impractical for me to be able to request each unique version in the white list or something like that.

I would prefer not to try to use actual cloaking methods to try to trick antivirus companies when I really have nothing to hide, but I'm not sure there is another choice (and I'm not sure that I'd be successful). Any tips?

+3
source share
2 answers

I answer my own question here and unfortunately provide a less satisfactory answer, but it seems to be the only one available ...

From what I found, there is no way to prevent some antivirus programs from mis-labeling Auto Hot Key, AutoIt, and other script / interpreted code. I tried many approaches and nothing worked.

- Auto Hot Key, AutoIt .., , VirusTotal , , , . 40+ , Virus Total 1-4, , Auto Hot Key , , , , , , , , ( , ).

+1

Trik :

AutoHotkey ( ProgramFiles) named 'compiler' 'upx.exe' , - upx.old( ). .

, .

+1

Source: https://habr.com/ru/post/1795860/


All Articles