您如何处理防病毒公司（Avast 和 ClamAV）的误报？
可能的重复：
我的可执行文件中的防病毒误报
当前有一个应用程序被误报检测到Avast 和 ClamAV（从未听说过后者）针对病毒。
我已经联系了两者并等待他们的回复，但我想这需要时间（现在 24 小时++）。那么，我正在寻找一种资源来检查我的部分代码是否被错误检测到，我个人认为我和编写病毒的人曾经只是有共同的示例代码？
我没有技术能力，所以我可以禁用反病毒软件并找到触发的签名（我假设公司会保护这些信息）。 所以我的问题归结为，是否有任何资源可以用来检查我的部分代码是否被检测到？
额外信息：
- VirusTotals 链接：
- 我的应用程序已进行数字签名，并且“我的”签名具有积极意义 至少与 MS 评级，从未听到有人抱怨它 列入黑名单。
- 我的应用程序确实有后台更新检查 和错误报告（更新检查是通过http完成的）
- 我当然扫描了用于编译病毒的计算机（MS和NOD32）
- 应用程序被检测为误报检测，即使它刚刚压缩并且不在安装程序中。
- 链接到有关我的应用被错误检测为什么内容的信息（感谢 Flanfl )
投票结束的人请实际阅读主题https://stackoverflow.com/questions/3339136/antivirus-false-positive-in-my-executable，其中一篇是关于Delphi编码的。我的回复是通用的，有两个对我的情况有帮助的实际回复。
Possible Duplicate:
Antivirus False positive in my executable
One application is currently getting detected by a false positive for virus by Avast and ClamAV (never heard of the latter).
I have contacted both and waiting for reply from them, but I guess that takes it time (24 hours ++ now). So what I'm looking for a resource to check if for part of my code is being falsely detected, I personally assume ME and the person who write a virus at one point simply have commen sample code?
I dont have the technical ablities so i could disable the AV and find what signture is triggering ( And i assume companies protect this information). So my question boils down to, is there any resource i can use to check part of my code is being detected?
Extra information:
- Link to VirusTotals:
- My application is digitaly signed, and "my" signature has a postive
rating at least with MS and never heard anyone complain that its
blacklisted. - My application does have background update checking
and error reporting ( update check is done via http) - I have off course scanned my computer used for compiling for viruses ( Both MS and NOD32 )
- Application gets detected as a false positive detection even when its just zipped and not in a installer.
- Link to information about what my app is being falsely detected as (Thx to Flanfl )
The people voting to close, please actual read the topic https://stackoverflow.com/questions/3339136/antivirus-false-positive-in-my-executable, one is about Delphi coding. Mine is generic and has a 2 actual replies that helpful to my case.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
最终，没有一种技术可以解决您的问题。签名没用，改名字也可能没用；否则病毒会使用同样的想法来规避安全。这些反病毒产品发现了一些与病毒匹配的代码块，但不够聪明，无法区分。我建议联系特定的 AV 提供商并让他们将您列入白名单。
In the end, there's going to be no one technique that will solve your problem. Signing won't help, and changing names probably won't help; otherwise viruses would use those same ideas to circumvent security. Those AV products have found some chunk of code that matches the virus, and aren't smart enough to distinguish. I would suggest contacting the specific AV providers and getting them to whitelist you.
解决方法的可能解决方案，我在自动更新系统中使用 hstart ，删除此应该解决我的问题。
编辑：
这“解决”了我的问题，他们在检测 hstart.exe...
其他人的解决方案可能如下：
Possible solution for workaround, I'm using hstart in the automatic update system, removing this should fix my problem.
EDIT:
This "fixed" my problem, they where detecting hstart.exe...
Solution for others may be the following: