I'm just starting out with WSA. I've found that it detects programs that I build with some versions of Microsoft Visual C++ (but not all of them?) as threats.
For example, a simple hello world program is detected as "Vir.Tool.Gen" if built with VC++ 2005 and as "W32.Hack.Tool" if built with VC++ 2010. But no apparent problems with the hello world programs built with VC++6, VC++ 2003, VC++2008 or VC++ 2012.
Is there a reasonable way to whitelist the output of programs that I build? I generally build my programs in one a few directory trees; for example, several projects might be underneath c:devtrees.
Maybe I could tell WSA that unknown programs anywhere in c:devtrees are not to be considered threats?
Thanks
WSA and Visual C++
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.