This question already has an answer here:

I have developed an IRP hooking based driver for one of my clients. Avast oes not complain about it but his AV suite reports it as malware. The lient will eventually sign this driver, but will it still be reported as malware by a handful (or more) AV suites or will it get green light everywhere ? I guess writing a filter river for the same purpose would not pose this problem, or ?

marked as duplicate by Josef, MechMK1, Xander, Ghedipunk, Steffen Ullrich Jul 10 at 16:35

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 4
    We are not AV vendors, and it's impossible to tell how an AV will react to specific drivers. – MechMK1 Jul 9 at 12:35