search

nefarius / Injector

Command line utility to inject and eject DLLs
MIT License
567 stars 92 forks source link

Intresting Problem about antivirus software #15

Closed 827Dream closed 2 years ago

827Dream commented 2 years ago

Hi,I've been using this tool you wrote recently, it's very useful，but i find an intresting problem , I compiled it myself (just x64)will be killed by antivirus software(trend)， Did not modify any options other than modifying to treat warnings as errors，but the version you publish won't be killed😄 image

image

so im very curious about this，maybe it has something to do with the compilation environment or options? I didn't modify any code after all

Can you be specific about your build environment and options?so that I can reproduce

nefarius commented 2 years ago

Most probably heuristics. Since my binaries have been circled for quite some years now their signature is probably deemed "safe", don't worry, it happened to me a few times too, I built something locally, AV quarantined it. Rebuilt with no changes, suddenly everything is fine. A side effect of AV, I have no real answer for I'm afraid.

My build environment is just bare bone Visual Studio 2019 with the C/C++ workload installed.