none
Blacklisting my driver RRS feed

  • Question

  • Hi,

    I am an application developer and distribute a kernel-mode driver with an application to my customers.

    The other day, antivirus software vendors found that the driver could be possibly abused and
    they started to detect it as malware.
    Although I have stopped distributing the driver to end-users when updating the application,
    I am concerned that someone may abuse the driver, make a malware and distribute it. 

    Now, I am wishing to find a way like the following.
    Could anyone give me advice?
    ===
    If Microsoft blacklists my proprietary driver,
    then the driver will not run on all the Windows. (Windows driver service will not start.)
    ===

    By the way, just for your information, answers as below will not meet my needs.
    -Disable digital signature of the driver, then it will not run.
    -Change PC settings, then the driver will not run.
    -It is safe since Windows Defender will block it.

    Thank you!

    Thursday, October 27, 2016 4:54 AM