Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

C# app appears false positive in AVG antivirus?

I have created a C# application that I've been testing on my other computer throughout the developing phase. However now that I've completed the app with few recent things that I added, the app is detected as virus (AVG doesn't show what kind of virus). Here are a few changes I did:

  1. Added a registry setting to allow user to start the app at Windows Startup.
  2. Changed the Assembly Name and Assembly Information (Because I wanted to rename the app).
  3. Went into signing settings and clicked on Sign the ClickOnce manifests.
  4. Went into security and clicked this is a full trust application.

The app is just a simple weather application. It reads data from an XML and displays it. I never had a false positive until I did these changes. So what would be the problem here and how do I resolve it?

I added the following settings:

RegistryKey rk = Registry.CurrentUser.OpenSubKey("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", true);
if (startupCheck.Checked) {
    rk.SetValue("WeTile", "\"" + Application.ExecutablePath.ToString() + "\"");
} else {
    rk.DeleteValue("WeTile", false);
}
like image 863
Muhammad Ali Avatar asked Feb 27 '15 22:02

Muhammad Ali


1 Answers

Many antivirus programs and Windows itself will complain about new/untrusted applications. Signing with a code signing certificate will improve your "ranking" greatly and allow your program to run, but self-signing via ClickOnce will not help at all.

There are many other posts about trying to get around these filters. You may want to contact antivirus companies such as AVG and see what can be done, and if they can "whitelist" your application. (AVG - Report a false positive) Submitting false detection reports and removing tasks that need full trust (or activities that seem "suspicious" to AV) will help you application run.

like image 56
Cyral Avatar answered Sep 30 '22 00:09

Cyral