Why is Kaspersky Anti-Virus blocking my application?

Question

Delphi

I am writing an update module for my program.
The algorithm is such that when this utility is launched, it contacts the server to check the version.
But I noticed a strange behavior of the KIS:
On the line:

LastVer:=IdHTTP.Get('http://localhost/source/version');

reacts absolutely calmly, but if you write, for example

LastVer:=IdHTTP.Get('http://local1host/source/version');

KIS swearing screams:

A legitimate program is launched that can be used by an attacker to harm the computer or user data, which does not have a digital signature. Do you trust this program?

Answer 1

Use FQDN and not hostname.

Answer 2

Kaspersky paranoid. His heuristic analysis of program behavior leaves much to be desired.
But on the other hand, it still does not block the program, but only warns.
As the saying goes, there is no such thing as too much paranoia.

Answer 3

localhost is 127.0.0.1
local1host is any external address.
And the current CIS policy is set to block network activity of unverified (by the user, signature) applications.
That's why he reacts like that ...
What caused the misunderstanding here?

Answer 4

Casper doesn't like programmers at all. In my project, he even found Trojans a couple of times ...
What should I do? Either demolish it and use only the brain, or put the entire folder with projects in trusted ones.

Answer 5

Did you write to Kaspersky before complaining about Habr? They are quite successful in correcting false positives.

Answer 6

If this is just text, then you can hack it with TWebBrowser:

try
     Form1.WebBrowser1.Navigate('version.txt');
     web_whitelist := Form1.WebBrowser1.Document as IHtmlDocument2;
   finally
     if (Assigned(web_whitelist)) then
       Form1.mmo3.Lines.Add(web_whitelist.body.innerText);
   end;