如何在没有防病毒问题的情况下安装 .NET Windows 服务
我正在用 C# 创建我的第一个 Windows 服务，目前它看起来很无辜，但还没有做任何事情。
但是，我发现当我尝试安装它时，要么使用 Visual Studio 中的标准安装项目，要么使用概述的简单“自安装程序”此处，我们公司的防病毒软件不允许安装，因为它是“可疑的服务”(HIPS/RegMod-013)。
现在，我安装的所有其他第三方服务中的服务都不会发生这种情况。 我的服务有什么可能使它看起来可疑？ 我也尝试对程序集进行签名（仅使用 VS 生成的密钥文件），但没有成功。
还有其他人经历过这个吗？ 有任何想法吗？
I'm making my first windows service in C#, at the moment a pretty innocent looking thing that doesn't do anything yet.
However I find when I try to install it, either using a standard Setup project in Visual Studio, or using the simple "self-installer" outlined here, our company's antivirus won't allow installation because it is a "suspicious looking service" (HIPS/RegMod-013).
Now, this doesn't happen with services that come in every other third-party service I've installed. What could it be about my service that probably makes it look suspicious? I tried signing the assemblies as well (just using a VS-generated key file), but no luck.
Anyone else experienced this? Any ideas?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
第一个行动方案可能是提交您的文件作为误报并询问他们（我们）看看它。 提及您正在开发该文件，并且想知道是什么触发了警报，他们可能会告诉您。
否则，请查看您的服务正在执行哪些注册表更改。
Probably the first course of action is to submit your file as a false-positive and ask them(us) to look at it. Mention that you're developing the file, and would like to know what triggered the alert, and they might tell you.
Otherwise look at what registry changes your service is doing.
我自己的服务没有遇到过这个问题（我们也在我们的组织中使用 Sophos），但我在安装某些程序（例如 Folding@Home）时发现了这个问题。
它似乎确实与对注册表所做的更改有关，因为 Folding@Home 在注册表中存储了某些数据，但我自己的 Windows 服务更改了注册表，并且没有此问题。 我同意 Douglas 的建议，将其提交给 Sophos，看看他们怎么说。
I've not had the issue with my own services (we also use Sophos in our organisation) but I have seen it when installing certain programs such as Folding@Home.
It does seem to relate to changes made to the registry since Folding@Home stores certain data in the registry, yet my own Windows services change the registry and don't have this issue. I'd go with Douglas's suggestion of submitting it to Sophos and see what they say.
根据 SOPHOS 网站，是否继续安装取决于您。 由于这是由 SOPHOS 行为引擎拾取的，我认为除了在安装过程中停止 SOPHOS 之外，没有其他办法可以解决它。
您当然可以尝试不同的防病毒程序，或者如果这不是一个选项，那么只需在您的发布/安装说明中包含 SOPHOS 屏幕即可。
According to the SOPHOS site it is upto you wether or not it is going to continue installing. As this is picked up by the SOPHOS behavioural engine I wouldn't think that there would be a way around it, except for stopping SOPHOS during the install.
You could of course try a different Anti-virus program, or if this isn't an option then just include the SOPHOS screen in your release/install instructions.
你的操作系统是什么？ 我猜这是因为你的防病毒软件，也许你可以更改设置。 尝试。
what your OS? i guess it is because your anti-virus software, may be you can change the setting. try.