Is there a way to prevent my tangled application from looking like a virus

Question

When I mess up my application, the antivirus gives a virus warning for the running application.

What can I do to avoid this?

I am using Visual Studio 2008 and .NET Reactor 3.9.8.0 for Windows XP Professional.

Windows and applications are updated, and when performing a full scan, the antivirus does not detect anything.

EDIT: Avast Antivirus gives a warning. MS Forefront does not.

EDIT 2: Changing the flow level of the control flow around it captures it.

Answer 1

Some EXE compressors / obfuscators / other tools are considered malware by antivirus programs, as they are often used to compress / encrypt / hide viruses. Try using another obfuscation program. If the problem persists, you can try to slightly modify your code, perhaps one of your code templates looks suspicious for an antivirus program.

EDIT: after a quick search, I did not find any false alarms from other users for .NET Reactor - you can also try to report the problem to EZIRIZ Support - maybe they know more about it.

Answer 2

I ended up in the same situation, this time with Avast and REACTOR 4.7.0. Eliminating the obfuscation of the control flow did nothing.

This was a NATIVE EXE file parameter (which introduces the WIN32 startup code to replace the standard CLR startup code). EZIRIZ and AVAST have been reported.

Curiously, the exe file (obtained by deactivating Avast) was scanned and declared clean ... from Avast.

Answer 3

Is the problem visible with one Anti-Virus or with many? You can also send your application to the virus lab and they will try to update their signatures so that they do not match in the future. This, of course, is problematic if every anti-virus software in the world recognizes your software as a virus;)