docs: add FAQ guidance for Windows Defender false positives (#16145)

docs/en-us/manual/faq.md

@@ -54,6 +54,13 @@ For Windows N/KN (European/Korean versions), you also need to install the [Media
 
 Due to runtime libraries and system components requiring Windows 10 or above, MAA no longer supports Windows 7/8/8.1 systems.
 
+### Flagged by Windows Defender / antivirus software (PUA / malware)
+
+- First verify the download source. Only use official channels (official website, GitHub Releases, Winget, or official community distribution channels), and make sure you downloaded the full package (for example, `MAA-<version>-win-x64.zip`).
+- Automation tools may trigger heuristic detections in some antivirus engines. A detection result does not always mean the program is malicious.
+- If the source is trusted, submit a false-positive sample to the security vendor and wait for signature updates.
+- While waiting, you can temporarily add the MAA installation directory to antivirus allowlists. Avoid disabling real-time protection entirely.
+
 ## Connection errors
 
 ### Verify ADB and connection address are correct

docs/zh-cn/manual/faq.md

@@ -54,6 +54,13 @@ winget install "Microsoft.VCRedist.2015+.x64" --override "/repair /passive /nore
 
 由于 MAA 依赖的运行库和系统组件要求 Windows 10 及以上版本，MAA 不再支持 Windows 7 / 8 / 8.1 系统。
 
+### 被 Windows Defender / 杀毒软件误报（PUA / 病毒）
+
+- 请先确认下载来源可信，仅使用官网、GitHub Releases、Winget 或官方群文件；并确认下载的是完整安装包（如 `MAA-<版本>-win-x64.zip`）。
+- 自动化工具可能会触发部分杀毒软件的启发式检测，出现误报并不一定代表软件存在恶意行为。
+- 若确认来源可信，建议向对应安全厂商提交误报样本，等待其病毒库修正。
+- 在等待修正期间，可临时将 MAA 安装目录加入杀毒软件白名单；不建议直接关闭系统实时防护。
+
 ## 连接错误
 
 ### 确认 ADB 及连接地址正确