R
3

Antivirus false positives are killing my malware cleanup workflow

It's so annoying when AV flags your tools as threats. I keep a whitelist folder on a USB drive now, and it saves tons of time.
2 comments

Log in to join the discussion

Log In
2 Comments
grace_perry44
Always keep a backup copy somewhere else too.
3
baker.andrew
Whitelisting tools on a USB drive seems like a shortcut that could backfire. Antivirus software flags items for a reason, and bypassing those warnings might let real threats slip through. For instance, I've seen cases where trusted tools were compromised and distributed with hidden payloads. @grace_perry44's advice on backups is solid, but if the tool itself is malicious, a backup won't help. It's better to deal with the hassle of false positives than risk an actual infection. Sometimes the extra time spent verifying tools is worth the security.
1