Inno安装病毒

Question

我使用 Inno Setup 为我的应用程序创建了一个设置。问题是，当我尝试执行设置或通过电子邮件发送它时，它被视为病毒...

; Script generated by the Inno Setup Script Wizard.
; SEE THE DOCUMENTATION FOR DETAILS ON CREATING INNO SETUP SCRIPT FILES!

[Setup]
; NOTE: The value of AppId uniquely identifies this application.
; Do not use the same AppId value in installers for other applications.
; (To generate a new GUID, click Tools | Generate GUID inside the IDE.)
AppId={{F6D8837D-F542-4326-A245-4B64AE8E8CD0}
AppName=S24
AppVersion=1.0
;AppVerName=S24 1.0
AppPublisher=Pierre Lagoutte
AppPublisherURL=https://s24.plagoutte.eu/
AppSupportURL=https://s24.plagoutte.eu/
AppUpdatesURL=https://s24.plagoutte.eu/
DefaultDirName={pf}\S24
DefaultGroupName=S24
AllowNoIcons=yes
LicenseFile=C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\licence.txt
OutputDir=C:\Users\Pierre\Documents\Qt\S24\setup.0
OutputBaseFilename=S24-Setup-22062018
Compression=lzma
SolidCompression=yes

[Languages]
Name: "english"; MessagesFile: "compiler:Default.isl"
Name: "brazilianportuguese"; MessagesFile: "compiler:Languages\BrazilianPortuguese.isl"
Name: "catalan"; MessagesFile: "compiler:Languages\Catalan.isl"
Name: "corsican"; MessagesFile: "compiler:Languages\Corsican.isl"
Name: "czech"; MessagesFile: "compiler:Languages\Czech.isl"
Name: "danish"; MessagesFile: "compiler:Languages\Danish.isl"
Name: "dutch"; MessagesFile: "compiler:Languages\Dutch.isl"
Name: "finnish"; MessagesFile: "compiler:Languages\Finnish.isl"
Name: "french"; MessagesFile: "compiler:Languages\French.isl"
Name: "german"; MessagesFile: "compiler:Languages\German.isl"
Name: "greek"; MessagesFile: "compiler:Languages\Greek.isl"
Name: "hebrew"; MessagesFile: "compiler:Languages\Hebrew.isl"
Name: "hungarian"; MessagesFile: "compiler:Languages\Hungarian.isl"
Name: "italian"; MessagesFile: "compiler:Languages\Italian.isl"
Name: "japanese"; MessagesFile: "compiler:Languages\Japanese.isl"
Name: "norwegian"; MessagesFile: "compiler:Languages\Norwegian.isl"
Name: "polish"; MessagesFile: "compiler:Languages\Polish.isl"
Name: "portuguese"; MessagesFile: "compiler:Languages\Portuguese.isl"
Name: "russian"; MessagesFile: "compiler:Languages\Russian.isl"
Name: "scottishgaelic"; MessagesFile: "compiler:Languages\ScottishGaelic.isl"
Name: "serbiancyrillic"; MessagesFile: "compiler:Languages\SerbianCyrillic.isl"
Name: "serbianlatin"; MessagesFile: "compiler:Languages\SerbianLatin.isl"
Name: "slovenian"; MessagesFile: "compiler:Languages\Slovenian.isl"
Name: "spanish"; MessagesFile: "compiler:Languages\Spanish.isl"
Name: "turkish"; MessagesFile: "compiler:Languages\Turkish.isl"
Name: "ukrainian"; MessagesFile: "compiler:Languages\Ukrainian.isl"

[Tasks]
Name: "desktopicon"; Description: "{cm:CreateDesktopIcon}"; GroupDescription: "{cm:AdditionalIcons}"; Flags: unchecked
Name: "quicklaunchicon"; Description: "{cm:CreateQuickLaunchIcon}"; GroupDescription: "{cm:AdditionalIcons}"; Flags: unchecked; OnlyBelowVersion: 0,6.1

[Files]
Source: "C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\S24.exe"; DestDir: "{app}"; Flags: ignoreversion
Source: "C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\platforms\*"; DestDir: "{app}\platforms"; Flags: ignoreversion recursesubdirs createallsubdirs
Source: "C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\libgcc_s_dw2-1.dll"; DestDir: "{app}"; Flags: ignoreversion
Source: "C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\libstdc++-6.dll"; DestDir: "{app}"; Flags: ignoreversion
Source: "C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\libwinpthread-1.dll"; DestDir: "{app}"; Flags: ignoreversion
Source: "C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\Qt5Core.dll"; DestDir: "{app}"; Flags: ignoreversion
Source: "C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\Qt5Gui.dll"; DestDir: "{app}"; Flags: ignoreversion
Source: "C:\Users\Pierre\Documents\Qt\build-S24-Desktop_Qt_5_7_0_MSVC2013_32bit-Release\release\Qt5Widgets.dll"; DestDir: "{app}"; Flags: ignoreversion
; NOTE: Don't use "Flags: ignoreversion" on any shared system files

[Icons]
Name: "{group}\S24"; Filename: "{app}\S24.exe"
Name: "{group}\{cm:ProgramOnTheWeb,S24}"; Filename: "https://s24.plagoutte.eu/"
Name: "{group}\{cm:UninstallProgram,S24}"; Filename: "{uninstallexe}"
Name: "{commondesktop}\S24"; Filename: "{app}\S24.exe"; Tasks: desktopicon
Name: "{userappdata}\Microsoft\Internet Explorer\Quick Launch\S24"; Filename: "{app}\S24.exe"; Tasks: quicklaunchicon

[Run]
Filename: "{app}\S24.exe"; Description: "{cm:LaunchProgram,S24}"; Flags: nowait postinstall skipifsilent

我的应用程序非常简单，当我启动它时，我的防病毒软件没有报告我它是病毒。真的是Inno Setup的安装卸载精灵

Answer 1

运行安装程序 exe：不清楚 "considered as a virus" 是什么意思。我猜你说的是标准警告 "this program may harm your computer"。好吧，它显示在任何需要运行管理权限的程序中（所有安装程序都需要）。您在这里有两个选择：1) 找到一个可以在用户模式下运行的安装程序，或者 2) 购买代码签名证书。第二个选项不会删除警告，但会变得非常友好。
将 exe 作为电子邮件附件发送。算了吧。就像十年前那样停止工作。世界上几乎所有的邮件服务器都会阻止可执行附件。将您的 exe 上传到某处并发送 link，而不是 exe 本身。
将您的 exe 上传到 www.virustotal.com 并检查它。防病毒程序偶尔会显示误报。这里没什么大不了的，只需联系杀毒软件开发人员并说明问题（并向 exe 提供一个 link）。他们足够快地修复误报。

Answer 2

我目前正在对此进行调查。这里有更多的事情要考虑。第一的。 Inno setup 是一种广泛使用的安装包制作工具，即使对于恶意软件也是如此。因此，防病毒软件会非常怀疑地处理在其上创建的任何软件包。第二。大多数防病毒软件都设置为检查在线文件的 "reputation"。在我的例子中，我创建了一个 .exe 包供下载，所以我的防病毒软件检查了它的 "reputation"。由于每次编译后它总是不知何故是新的，因此下载的用户太少，因此声誉不佳。就我而言，这是 "Heur.AdvML.B" 威胁。

如果其他用户建议的答案中有 none 个适合您。我会忽略该消息，直到 .exe 包完成，然后将其发送到防病毒数据库，检查服务器上的电子邮件，作为误报。

Answer 3

我遇到了同样的问题，在我的情况下，windows 会直接删除安装程序。我建议您使用其他安装程序创建者，例如 installforge 或其他任何...

Inno安装病毒

Inno setup virus

c++

qt

inno-setup

virus