Skip to content

False detections by antivirus software #5

@resilar

Description

@resilar

In VirusTotal, 6/67 engines falsely detect hotfinger.exe as malicious. This is bad because the 6 engines include popular antivirus software such as Avast, AVG, Cylance & Symantec. Users do not like this, so do something about it. Possible solutions:

  1. Carefully modify HotFinger to resolve false positives one by one. However, this is non-trivial because 4 out of the 6 false detections are based on heuristics (that is, cannot be addressed by changing few bytes in the hotfinger.exe executable).

  2. Do not modify HotFinger itself, but use existing packer/protector to make hotfinger.exe undetectable. Writing a custom "dropper" is also an option.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions