mirror of
https://github.com/quasar/Quasar.git
synced 2026-04-26 07:45:57 +03:00
[GH-ISSUE #545] Operation did not complete successfully because the file contains a virus or potentially unwanted software. #308
Labels
No labels
bug
bug
cant-reproduce
discussion
duplicate
easy
enhancement
help wanted
improvement
invalid
need more info
pull-request
question
wont-add
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/Quasar#308
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @manikantad on GitHub (Oct 25, 2016).
Original GitHub issue: https://github.com/quasar/Quasar/issues/545
Hi ,
Not able to build the project ,when i was try to build the project facing issue like Found Some malware. windows defender removing it.
Even i have checked in defender logs ,that was showing like this "This program is used to create viruses, worms or other malware."
Please find the screen shots below.
@abdullah2993 commented on GitHub (Oct 25, 2016):
add an exclusion for project folder in your antivirus
@manikantad commented on GitHub (Oct 27, 2016):
We can add that exclusion but as a security context this is showing high priority malware right,how we can over come this.
@dudelard commented on GitHub (Oct 27, 2016):
In a security context, every client built will be detected as a potential virus.
If you don't want to add an exclusion, do not use Quasar.
@MaxXor commented on GitHub (Oct 27, 2016):
Adding an exception for Quasar in your antivirus is the only way because Quasar is used for malicious purposes by some people...
@TommyWhite commented on GitHub (Oct 30, 2016):
Is there any way to modify the Quasar in order to bypass AV? Make new PE signature wich will be undetectable.
@0xE232FE commented on GitHub (Oct 30, 2016):
You can crypt the Executable and run it with a Loader Programm that Decyrypt it in Memory and Execute the Assembly from Memory in Memory. AV is unable to scan other Memory Spaces. You can make a Loader in any language like C in my opinion is the best and easiest way. The simpler the loader is that harder is it for AV to detect. If you rise the complexity AV concerns something. You can block and re-Route Memory Access or Access by AVs. If your Loader isn't known or going Public on Virustotal you can be sure its safe!
First rule for Crypter is do not Copy & Paste!
Write your own Code and be as much creative as possible.
Do not encrypt or Obfuscate it with Standard tools. Create your own Obfuscate Algorithm.
If you want to fix AV Signature Detections you can change the Code within Assembler. For Heuristic Detections change program flow! Thats all. There is not 100% Guarantee to stay undetected forever but there is quiet a small chance for a Detection!
@TommyWhite commented on GitHub (Nov 28, 2016):
That would be great wrap app agent with something like this,
https://stackoverflow.com/questions/826398/is-it-possible-to-dynamically-compile-and-execute-c-sharp-code-fragments
And invoke it dynamically, in run time.
@Scatterblak commented on GitHub (Mar 23, 2021):
Incredibly bad idea. All you'll be doing then is building software that can only run on one machine,
@BurntDog commented on GitHub (Mar 23, 2021):
If you're using it in a legit manner then a exclusion wouldn't be a issue.
@Scatterblak commented on GitHub (Mar 23, 2021):
It's an issue if you're writing software for a living, and someone else is going to run your software someday. Unless you're fine with asking all of your users to start adding exclusions just to get your software to run.
@BurntDog commented on GitHub (Mar 23, 2021):
Look up how and what needs to be done to help keep software off AV list, it's very costly. No one in their right mind would pay those fees for software that is free. People misuse tools like this and that's why they are detected in the first place.
I make my clients detected far less then normal, according to anti-scan only 4 detect it but I know that's not a correct number but still less detected and 100% pass Windows Defender. I also won't tell my method nor have I and this isn't the forum for such talk anyway.