A couple of users have reported that my app is being flagged by Avast Anti-virus as containing a virus - specifically the "Evo-gen [Trj]" malware.
I narrowed it down to the "Net" library (1.80 or 1.81) being included in my app. Meaning, if this lib is just "checked" in the Library Manager, my app will be flagged as containing this malware, even though my app doesn't normally use this lib (it only uses it when a compiler flag is set and this compiler flag is not set when it's being flagged as malware) - meaning I can simply uncheck that lib from the lib manager and I can compile the app without any errors.
I know that virus scanners simply look for pre-defined strings of bytes (the virus's signature) to detect viruses. So to see if the lib contained the signature, I tried simply adding the Net lib to another project, and it did NOT get flagged as malware - so this indicates the virus signature is not "within" the code of the net lib.
And I know the signature is not within my app because if I compile it without the Net Lib, it also won't get flagged.
Because my app only gets flagged as malware simply with the lib being included in it, it is making me think that this particular virus signature is being created by some unlucky matchup of the way the net lib is being included/attached to my app in some way.
So, is there a way to get the Net lib to "attached" to my app in a different way so that it won't create this particular virus signature?
(P.S. I also tried compiling my app with and without obfuscation in an attempt to change it's "signature", but it was still flagged both ways)
I narrowed it down to the "Net" library (1.80 or 1.81) being included in my app. Meaning, if this lib is just "checked" in the Library Manager, my app will be flagged as containing this malware, even though my app doesn't normally use this lib (it only uses it when a compiler flag is set and this compiler flag is not set when it's being flagged as malware) - meaning I can simply uncheck that lib from the lib manager and I can compile the app without any errors.
I know that virus scanners simply look for pre-defined strings of bytes (the virus's signature) to detect viruses. So to see if the lib contained the signature, I tried simply adding the Net lib to another project, and it did NOT get flagged as malware - so this indicates the virus signature is not "within" the code of the net lib.
And I know the signature is not within my app because if I compile it without the Net Lib, it also won't get flagged.
Because my app only gets flagged as malware simply with the lib being included in it, it is making me think that this particular virus signature is being created by some unlucky matchup of the way the net lib is being included/attached to my app in some way.
So, is there a way to get the Net lib to "attached" to my app in a different way so that it won't create this particular virus signature?
(P.S. I also tried compiling my app with and without obfuscation in an attempt to change it's "signature", but it was still flagged both ways)
Last edited: