Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.basic.visual.misc > #1929 > unrolled thread
| Started by | GS <gs@somewhere.net> |
|---|---|
| First post | 2013-12-19 21:33 -0500 |
| Last post | 2013-12-23 12:09 -0700 |
| Articles | 20 on this page of 61 — 11 participants |
Back to article view | Back to comp.lang.basic.visual.misc
After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 21:33 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-19 21:41 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:03 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 22:59 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-19 23:06 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:48 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 08:32 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 10:39 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 18:09 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 17:22 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 13:05 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Farnsworth" <nospam@nospam.com> - 2013-12-20 00:01 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 14:50 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 23:02 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2013-12-20 08:29 +0100
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 12:57 -0500
a/v report GS <gs@somewhere.net> - 2013-12-20 13:16 -0500
Re: a/v report "Farnsworth" <nospam@nospam.com> - 2013-12-20 14:21 -0500
Re: a/v report GS <gs@somewhere.net> - 2013-12-20 14:28 -0500
Re: a/v report "CoderX" <coder@x.com> - 2013-12-22 12:57 -0500
Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
Re: a/v report "Brian Kelly" <Brian@mcmail.com.not> - 2013-12-20 20:52 +0000
Re: a/v report GS <gs@somewhere.net> - 2013-12-20 16:08 -0500
Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-21 12:36 +0100
Re: a/v report ralph <nt_consulting@yahoo.com> - 2013-12-21 07:12 -0600
Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
Re: a/v report GS <gs@somewhere.net> - 2013-12-21 10:54 -0500
Re: a/v report ObiWan <obiwan@mvps.org> - 2013-12-22 18:08 +0100
Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:11 +0100
VirusTotal report GS <gs@somewhere.net> - 2013-12-20 14:34 -0500
Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-22 12:59 -0500
Re: VirusTotal report Tony Toews <ttoews@telusplanet.net> - 2013-12-22 12:52 -0700
Re: VirusTotal report GS <gs@somewhere.net> - 2013-12-22 19:51 -0500
Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:57 -0500
Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:59 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 17:28 +0530
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 09:08 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 10:59 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 14:53 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:06 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:40 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 22:58 +0530
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 13:43 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 09:08 +0000
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 03:04 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 10:24 +0000
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 11:42 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 11:25 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 12:48 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:08 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 13:54 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:06 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 15:15 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 14:49 +0000
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:03 +0100
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 15:06 +0000
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:17 +0100
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2014-01-04 23:23 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-05 17:09 +0100
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 11:58 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:09 -0700
Page 1 of 4 [1] 2 3 4 Next page →
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-19 21:33 -0500 |
| Subject | After Install/Run antivirus software classifies my EXEs as 'suspicious' |
| Message-ID | <l90a9j$n0l$1@dont-email.me> |
What does other installed apps have that prevents antivirus software from blocking them? I have a problem with being blocked regardless of where the app is located. Is there a standard 'flag' that needs setting, at design time, or registration action required on install? -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [next] | [standalone]
| From | ralph <nt_consulting@yahoo.com> |
|---|---|
| Date | 2013-12-19 21:41 -0600 |
| Message-ID | <k4d7b9h627tv0vfn074ik2lskcpevtqape@4ax.com> |
| In reply to | #1929 |
On Thu, 19 Dec 2013 21:33:20 -0500, GS <gs@somewhere.net> wrote: >What does other installed apps have that prevents antivirus software >from blocking them? I have a problem with being blocked regardless of >where the app is located. Is there a standard 'flag' that needs >setting, at design time, or registration action required on install? LOL. First off, is this a joke? Of course there is no such 'flag'! If there really was such a thing the very first step anyone, planning evil, would do is to set the 'flag'. <G> Your application is considered 'suspicious' because when scanned by antivirus software it appears to contain malicious code. Exactly what that code might be can be difficult at times to determine. Your app may in fact, albeit innocently, be attempting to do something considered nefarious. Take a hard look at what your application is doing. If it is taking liberties with security - re-write it. Or it may be a false positive. This happens on occasion and can come about purely by accident. Some arrangement within your application of perfectly benign statements creates a series of bits in the binary which map 'signatures' of known malware. Can be very tough to ferret out. Unfortunately, the usual procedure is to remove blocks of functionality until you can isolate the problem to a limited area, then often a simple rearrangement of code can resolve the problem. Then of course your compiler, components, or installer may have picked up a virus. Is your development box clean? Most antivirus software allow you to over-ride some complaints. Generally consider unwise to grant exceptions but can be employed in a pinch. In-house that is. Don't expect any customers to be so trusting. <g> -ralph
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-19 23:03 -0500 |
| Message-ID | <l90fio$eg0$1@dont-email.me> |
| In reply to | #1930 |
> First off, is this a joke? Of course there is no such 'flag'! If > there > really was such a thing the very first step anyone, planning evil, > would do is to set the 'flag'. <G> Yeah.., dumb Q now that I think of it! > > Your application is considered 'suspicious' because when scanned by > antivirus software it appears to contain malicious code. Exactly > what > that code might be can be difficult at times to determine. Your app > may in fact, albeit innocently, be attempting to do something > considered nefarious. They're frontloader EXEs that automate Excel, mostly. (One is an actual VB6 app) > > Take a hard look at what your application is doing. If it is taking > liberties with security - re-write it. Not the case, though they all use WMI at startup. > > Or it may be a false positive. This happens on occasion and can come > about purely by accident. Some arrangement within your application of > perfectly benign statements creates a series of bits in the binary > which map 'signatures' of known malware. > > Can be very tough to ferret out. Unfortunately, the usual procedure > is > to remove blocks of functionality until you can isolate the problem > to > a limited area, then often a simple rearrangement of code can resolve > the problem. Perhaps I'll test without the code using WMI. Everything else is basic VB... > > Then of course your compiler, components, or installer may have > picked > up a virus. Is your development box clean? Yes! > > Most antivirus software allow you to over-ride some complaints. > Generally consider unwise to grant exceptions but can be employed in > a > pinch. In-house that is. Yeah, I have to set exceptions on their top level folder in my antivirus software. > Don't expect any customers to be so trusting. -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | Tony Toews <ttoews@telusplanet.net> |
|---|---|
| Date | 2013-12-19 22:59 -0700 |
| Message-ID | <m2n7b9ts74ta6d9nq6v6qjhs1j0goim41l@4ax.com> |
| In reply to | #1930 |
On Thu, 19 Dec 2013 21:41:46 -0600, ralph <nt_consulting@yahoo.com> wrote: >Exactly what >that code might be can be difficult at times to determine. I once had a Microsoft Access database with queries, forms, reports and VBA code flagged as malicious. I was happily working in it and my A/V software happily deleted it on me. A true PITA to work with. I sent a copy of the MDB to the anti virus vendor and worked on something else for a few days until the problem stopped happening after an update. Tony
[toc] | [prev] | [next] | [standalone]
| From | "Mayayana" <mayayana@invalid.nospam> |
|---|---|
| Date | 2013-12-19 23:06 -0500 |
| Message-ID | <l90fn0$evo$1@dont-email.me> |
| In reply to | #1929 |
Karl Peterson had an interesting piece about that kind of problem a few years ago. I might be of some value in your case: http://visualstudiomagazine.com/articles/2008/01/29/are-you-safer-now.aspx I haven't noticed any particular trouble with AV, but those programs have become blown way out of proportion, and there's an increasing tendency to simply cast suspicion on anything unknown. If it's not a common, corporate program then it's guilty until proven innocent. "GS" <gs@somewhere.net> wrote in message news:l90a9j$n0l$1@dont-email.me... | What does other installed apps have that prevents antivirus software | from blocking them? I have a problem with being blocked regardless of | where the app is located. Is there a standard 'flag' that needs | setting, at design time, or registration action required on install? |
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-19 23:48 -0500 |
| Message-ID | <l90i7o$oph$1@dont-email.me> |
| In reply to | #1932 |
> Karl Peterson had an interesting piece about that > kind of problem a few years ago. I might be of some > value in your case: > > http://visualstudiomagazine.com/articles/2008/01/29/are-you-safer-now.aspx > > I haven't noticed any particular trouble with AV, but > those programs have become blown way out of > proportion, and there's an increasing tendency to > simply cast suspicion on anything unknown. If it's > not a common, corporate program then it's guilty > until proven innocent. > > > "GS" <gs@somewhere.net> wrote in message > news:l90a9j$n0l$1@dont-email.me... >> What does other installed apps have that prevents antivirus software >> from blocking them? I have a problem with being blocked regardless >> of where the app is located. Is there a standard 'flag' that needs >> setting, at design time, or registration action required on install? Thanks for that! My apps don't use the Registry for anything.., not even file associations! The jist of the article does align with Ralph's comments, though. Just did some testing with apps that do use the Registry and they run fine. Also tested apps that don't use WMI and they also run fine. Looks like I might need to put that code in a DLL. Note that my Excel addins that use WMI run fine. Hmm... -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | "Mayayana" <mayayana@invalid.nospam> |
|---|---|
| Date | 2013-12-20 08:32 -0500 |
| Message-ID | <l91gsg$cm3$1@dont-email.me> |
| In reply to | #1933 |
| Just did some testing with apps that do use the Registry and they run | fine. That was just an example he ran across. There could be other strings that might have an effect. AV that I've seen tends to be "dumb on the safe side", doing things like raising flags on all .vbs files, simply because they were used years ago to write malware, rather than looking at the code.... and all the while giving EXEs a pass. | Also tested apps that don't use WMI and they also run fine. Looks | like I might need to put that code in a DLL. Note that my Excel addins | that use WMI run fine. Hmm... It seems odd that AV might be set off by WMI. It's used extensively in corporate IT. On the other hand, most of WMI is just bloated, slow, redundant wrappers. I can't think of anything it has that isn't easily got elsewhere, with one exception: The system information functions are very extensive and seem to be in WMI- specific libraries. Even in scripting I only use WMI for system info and for the Registry functions (because WScript.Shell.Reg* functions are not dependable).
[toc] | [prev] | [next] | [standalone]
| From | ralph <nt_consulting@yahoo.com> |
|---|---|
| Date | 2013-12-20 10:39 -0600 |
| Message-ID | <ufr8b9tnd7p2d311aocnlgfgrpljpea8nm@4ax.com> |
| In reply to | #1938 |
On Fri, 20 Dec 2013 08:32:07 -0500, "Mayayana" <mayayana@invalid.nospam> wrote: > > It seems odd that AV might be set off by WMI. It's >used extensively in corporate IT. On the other hand, >most of WMI is just bloated, slow, redundant wrappers. >I can't think of anything it has that isn't easily got >elsewhere, with one exception: The system information >functions are very extensive and seem to be in WMI- >specific libraries. Even in scripting I only use WMI for >system info and for the Registry functions (because >WScript.Shell.Reg* functions are not dependable). > Just for the record, you do understand that WMI (Microsoft Windows Management Instrumentation) is design for *script* administrative management? It is based on an Industry Standard (CIM). http://en.wikipedia.org/wiki/Common_Management_Information_Protocol "Lean 'n mean" has never been a goal. <g> -ralph
[toc] | [prev] | [next] | [standalone]
| From | "Mayayana" <mayayana@invalid.nospam> |
|---|---|
| Date | 2013-12-20 18:09 -0500 |
| Message-ID | <l92imm$3ub$1@dont-email.me> |
| In reply to | #1939 |
| Just for the record, you do understand that WMI (Microsoft Windows | Management Instrumentation) is design for *script* administrative | management? It is based on an Industry Standard (CIM). | http://en.wikipedia.org/wiki/Common_Management_Information_Protocol | | "Lean 'n mean" has never been a goal. <g> | But it's noticeably slow even compared to VBS. I can't say I'm impressed with official "industry standards", either. WMI is monstrously designed. It's such a mess that I have to look up the syntax and copy/paste every time I use it. On top of all that, it provides very little that script can't already do. Oddly, I remember VBPJ doing an excited feature issue on WMI when it came out. It was touted as an almost endless, new toolbox for VB.
[toc] | [prev] | [next] | [standalone]
| From | ralph <nt_consulting@yahoo.com> |
|---|---|
| Date | 2013-12-20 17:22 -0600 |
| Message-ID | <a5k9b9t6oh0jsovese7pn0q0m1i6i01iad@4ax.com> |
| In reply to | #1949 |
On Fri, 20 Dec 2013 18:09:17 -0500, "Mayayana" <mayayana@invalid.nospam> wrote: >| Just for the record, you do understand that WMI (Microsoft Windows >| Management Instrumentation) is design for *script* administrative >| management? It is based on an Industry Standard (CIM). >| http://en.wikipedia.org/wiki/Common_Management_Information_Protocol >| >| "Lean 'n mean" has never been a goal. <g> >| > But it's noticeably slow even compared to VBS. >I can't say I'm impressed with official "industry >standards", either. WMI is monstrously designed. >It's such a mess that I have to look up the syntax >and copy/paste every time I use it. On top of all >that, it provides very little that script can't already >do. > > Oddly, I remember VBPJ doing an excited feature >issue on WMI when it came out. It was touted as >an almost endless, new toolbox for VB. > True. Anything "scripting" to most of the IT industry meant (and still means) "VB". <g> -ralph
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-20 13:05 -0500 |
| Message-ID | <l920tu$g0q$1@dont-email.me> |
| In reply to | #1938 |
>> Just did some testing with apps that do use the Registry and they >> run fine. > > That was just an example he ran across. There could be > other strings that might have an effect. AV that I've seen > tends to be "dumb on the safe side", doing things like raising > flags on all .vbs files, simply because they were used years > ago to write malware, rather than looking at the code.... > and all the while giving EXEs a pass. > >> Also tested apps that don't use WMI and they also run fine. Looks >> like I might need to put that code in a DLL. Note that my Excel >> addins that use WMI run fine. Hmm... > > It seems odd that AV might be set off by WMI. It's > used extensively in corporate IT. On the other hand, > most of WMI is just bloated, slow, redundant wrappers. > I can't think of anything it has that isn't easily got > elsewhere, with one exception: The system information > functions are very extensive and seem to be in WMI- > specific libraries. Even in scripting I only use WMI for > system info and for the Registry functions (because > WScript.Shell.Reg* functions are not dependable). I find this interesting that all my EXEs using WMI get blocked by a/v, and all that don't use it run fine! Note that I use your recommended method for creating a ref late bound. Perhaps it's the way the code is structured, because the apps don't mess with anything other than their own files, and user files saved to wherever. Note also that, in deference to Tony's report, none of my VBA projects using WMI have problems with a/v apps. -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | "Farnsworth" <nospam@nospam.com> |
|---|---|
| Date | 2013-12-20 00:01 -0500 |
| Message-ID | <l90ivn$5cv$1@speranza.aioe.org> |
| In reply to | #1929 |
"GS" <gs@somewhere.net> wrote in message news:l90a9j$n0l$1@dont-email.me... > What does other installed apps have that prevents antivirus software from > blocking them? I have a problem with being blocked regardless of where the > app is located. Is there a standard 'flag' that needs setting, at design > time, or registration action required on install? Try using Virus Total: https://www.virustotal.com/ McAfee is well known for flagging many EXE's as suspicious even when all other AV program say it's clean.
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-20 14:50 -0500 |
| Message-ID | <l92720$n5i$1@dont-email.me> |
| In reply to | #1934 |
> "GS" <gs@somewhere.net> wrote in message > news:l90a9j$n0l$1@dont-email.me... >> What does other installed apps have that prevents antivirus >> software from blocking them? I have a problem with being blocked >> regardless of where the app is located. Is there a standard 'flag' >> that needs setting, at design time, or registration action required >> on install? > > Try using Virus Total: > > https://www.virustotal.com/ > > McAfee is well known for flagging many EXE's as suspicious even when > all other AV program say it's clean. Thanks for your suggestion! Did this and got a clean bill for 49 a/v apps (including mine). I submitted the file to Avast for analysis of 'false positive'! -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | Tony Toews <ttoews@telusplanet.net> |
|---|---|
| Date | 2013-12-19 23:02 -0700 |
| Message-ID | <m8n7b9d1qo7n26pr64om1e3crue9qosdde@4ax.com> |
| In reply to | #1929 |
On Thu, 19 Dec 2013 21:33:20 -0500, GS <gs@somewhere.net> wrote: >What does other installed apps have that prevents antivirus software >from blocking them? I have a problem with being blocked regardless of >where the app is located. Is there an exact type of message or virus definition name from the client? What A/V software are they using? Can you setup a repro on a guest OS? Also try rearranging the order of a few subroutine/function calls each each module. <shrug> Just guessing. Tony
[toc] | [prev] | [next] | [standalone]
| From | ObiWan <obiwan@mvps.org> |
|---|---|
| Date | 2013-12-20 08:29 +0100 |
| Message-ID | <20131220082906.00005e4e@albasani.net> |
| In reply to | #1929 |
:: On Thu, 19 Dec 2013 21:33:20 -0500 :: (comp.lang.basic.visual.misc,microsoft.public.vb.general.discussion) :: <l90a9j$n0l$1@dont-email.me> :: GS <gs@somewhere.net> wrote: > What does other installed apps have that prevents antivirus software > from blocking them? I have a problem with being blocked regardless of > where the app is located. Is there a standard 'flag' that needs > setting, at design time, or registration action required on install? what does the AV software report ? I mean, which "virus" name ? Also, try uploading your exe to https://www.virustotal.com/ scan it and check which AVs are flagging your app and "how" (virus name) then just check the details related to that malware and you'll see why the AVs are flagging your app and possibly find a way to solve the issue
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-20 12:57 -0500 |
| Message-ID | <l920f0$csg$1@dont-email.me> |
| In reply to | #1937 |
>>> On Thu, 19 Dec 2013 21:33:20 -0500 >>> (comp.lang.basic.visual.misc,microsoft.public.vb.general.discussion) >>> <l90a9j$n0l$1@dont-email.me> >>> GS <gs@somewhere.net> wrote: > >> What does other installed apps have that prevents antivirus software >> from blocking them? I have a problem with being blocked regardless >> of where the app is located. Is there a standard 'flag' that needs >> setting, at design time, or registration action required on install? > > what does the AV software report ? I mean, which "virus" name ? > > Also, try uploading your exe to https://www.virustotal.com/ scan it > and check which AVs are flagging your app and "how" (virus name) > > then just check the details related to that malware and you'll see > why the AVs are flagging your app and possibly find a way to solve > the issue Thanks! This is what Farnsworth suggested also. Looks worth a try... -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-20 13:16 -0500 |
| Subject | a/v report |
| Message-ID | <l921i2$k6b$1@dont-email.me> |
| In reply to | #1929 |
The a/v reports Win32:evo-gen [susp] as the virus. -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | "Farnsworth" <nospam@nospam.com> |
|---|---|
| Date | 2013-12-20 14:21 -0500 |
| Subject | Re: a/v report |
| Message-ID | <l925cs$tih$1@speranza.aioe.org> |
| In reply to | #1942 |
"GS" <gs@somewhere.net> wrote in message news:l921i2$k6b$1@dont-email.me... > The a/v reports Win32:evo-gen [susp] as the virus. > > -- > Garry > > Free usenet access at http://www.eternal-september.org > Classic VB Users Regroup! > comp.lang.basic.visual.misc > microsoft.public.vb.general.discussion > > > > --- > This email is free from viruses and malware because avast! Antivirus > protection is active. > http://www.avast.com [Added GS to the "Do not respond to" list]
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-20 14:28 -0500 |
| Subject | Re: a/v report |
| Message-ID | <l925p7$fcl$1@dont-email.me> |
| In reply to | #1943 |
> "GS" <gs@somewhere.net> wrote in message > news:l921i2$k6b$1@dont-email.me... >> The a/v reports Win32:evo-gen [susp] as the virus. >> >> -- Garry >> >> Free usenet access at http://www.eternal-september.org >> Classic VB Users Regroup! >> comp.lang.basic.visual.misc >> microsoft.public.vb.general.discussion >> >> >> >> --- >> This email is free from viruses and malware because avast! >> Antivirus protection is active. >> http://www.avast.com > > [Added GS to the "Do not respond to" list] ?? -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | "CoderX" <coder@x.com> |
|---|---|
| Date | 2013-12-22 12:57 -0500 |
| Subject | Re: a/v report |
| Message-ID | <l9796n$4nh$1@dont-email.me> |
| In reply to | #1944 |
>> [Added GS to the "Do not respond to" list] > > ?? He's trying to say politely that you're a goofus and he's not wasting time on you anymore. Clear enough?
[toc] | [prev] | [next] | [standalone]
Page 1 of 4 [1] 2 3 4 Next page →
Back to top | Article view | comp.lang.basic.visual.misc
csiph-web