Detecting flags of AV parts

Question: What's the best strategy to debug (code lookup) a .Net application that runs AV?

More details: I am trying to debug a .Net / Mono application that is being intercepted by AV (in more detail for my AVG and NOD32 case).

I would like to know what the best options or steps are for detection on user machines, what might be the piece of code that runs these AV files to block the application from executing.

PS: To be very specific, the application uses Fody Costura to collect assembled assemblies (such as Mono.Sqlite.dll, custom assemblies, Sqlite drivers, image resources, etc.).

+3


source to share





All Articles