Solved

False positive detection by anti-virus

Posted on 2007-11-28
5
271 Views
Last Modified: 2013-11-22
After I have published a newer version of my software some users who tried to download it received an alarm of virus detection.
I know it is a "false positive" detection, but the users are afraid of installating it.
Is there an way of being rid of this?
Is there a place to have my executable installer being checked against all (os various) known anti-virus.
What do you suggest to me?
I have created the executable installer with Inno Setup.
The software is Percautus Radio 1.5.1

TIA

Joao Carlos
0
Comment
Question by:jclobocar
5 Comments
 
LVL 13

Expert Comment

by:rfwoolf
ID: 20366447
Some suggestions:
Put the word "setup" in your installation file.
It also might help if the extension is .msi
e.g. setup.msi

These are only ideas. There are numerous reasons why an antivirus program will think an exe is a virus.
0
 
LVL 28

Accepted Solution

by:
2266180 earned 100 total points
ID: 20366773
that usually happen when you are using hooks. is it your case? if so, well, they just need to configure correctly/change their antivirus, OR, use an altenative donwload location from a trusted site (download.com, tucows.com, softpedia.com, etc) and maybe mention the antiviruses that have false-positives so that people will know they'll get one before downloading.

another case is when you are using a software like madexcept (and maybe some otehr tracing utilities).
0
 
LVL 17

Expert Comment

by:TheRealLoki
ID: 20370408
Also think about what components you are using. eg. a friend of mine wrote some tcp components based on ICS. His components were then unfortunately used for mail bots by other nasty people.
The AV companies startign looking for his 'greeting text' in the tcp socket components.
I'm not suggesting you are using his components, but if you are using a 3rd party tcp. udp set, it's a possibility they have also been flagged as "used by mail spammers"
It's something to think about anyway...

If you have the time, you can email the AV company and ask them to test your install and tell you what part is being flagged. May take time, may cost money, but I'm sure it happens a lot.
0
 
LVL 1

Author Closing Comment

by:jclobocar
ID: 31411440
thank you.
0
 
LVL 28

Expert Comment

by:2266180
ID: 20480140
why a B grade?
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Introduction I have seen many questions in this Delphi topic area where queries in threads are needed or suggested. I know bumped into a similar need. This article will address some of the concepts when dealing with a multithreaded delphi database…
In my programming career I have only very rarely run into situations where operator overloading would be of any use in my work.  Normally those situations involved math with either overly large numbers (hundreds of thousands of digits or accuracy re…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now