Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.basic.visual.misc > #1929 > unrolled thread

After Install/Run antivirus software classifies my EXEs as 'suspicious'

Started byGS <gs@somewhere.net>
First post2013-12-19 21:33 -0500
Last post2013-12-23 12:09 -0700
Articles 20 on this page of 61 — 11 participants

Back to article view | Back to comp.lang.basic.visual.misc


Contents

  After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 21:33 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-19 21:41 -0600
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:03 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 22:59 -0700
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-19 23:06 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:48 -0500
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 08:32 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 10:39 -0600
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 18:09 -0500
              Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 17:22 -0600
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 13:05 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Farnsworth" <nospam@nospam.com> - 2013-12-20 00:01 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 14:50 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 23:02 -0700
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2013-12-20 08:29 +0100
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 12:57 -0500
    a/v report GS <gs@somewhere.net> - 2013-12-20 13:16 -0500
      Re: a/v report "Farnsworth" <nospam@nospam.com> - 2013-12-20 14:21 -0500
        Re: a/v report GS <gs@somewhere.net> - 2013-12-20 14:28 -0500
          Re: a/v report "CoderX" <coder@x.com> - 2013-12-22 12:57 -0500
          Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
      Re: a/v report "Brian Kelly" <Brian@mcmail.com.not> - 2013-12-20 20:52 +0000
        Re: a/v report GS <gs@somewhere.net> - 2013-12-20 16:08 -0500
          Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-21 12:36 +0100
            Re: a/v report ralph <nt_consulting@yahoo.com> - 2013-12-21 07:12 -0600
              Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
            Re: a/v report GS <gs@somewhere.net> - 2013-12-21 10:54 -0500
            Re: a/v report ObiWan <obiwan@mvps.org> - 2013-12-22 18:08 +0100
              Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:11 +0100
    VirusTotal report GS <gs@somewhere.net> - 2013-12-20 14:34 -0500
      Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-22 12:59 -0500
        Re: VirusTotal report Tony Toews <ttoews@telusplanet.net> - 2013-12-22 12:52 -0700
          Re: VirusTotal report GS <gs@somewhere.net> - 2013-12-22 19:51 -0500
            Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:57 -0500
          Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:59 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 17:28 +0530
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 09:08 -0500
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 10:59 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 14:53 -0500
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:06 -0500
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:40 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 22:58 +0530
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 13:43 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 09:08 +0000
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 03:04 -0700
              Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 10:24 +0000
                Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 11:42 -0500
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 11:25 -0600
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 12:48 -0500
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:08 -0700
                      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 13:54 -0600
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:06 -0700
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 15:15 -0500
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 14:49 +0000
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:03 +0100
                      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 15:06 +0000
                        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:17 +0100
                          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2014-01-04 23:23 -0700
                            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-05 17:09 +0100
                Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 11:58 -0700
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:09 -0700

Page 1 of 4  [1] 2 3 4  Next page →


#1929 — After Install/Run antivirus software classifies my EXEs as 'suspicious'

FromGS <gs@somewhere.net>
Date2013-12-19 21:33 -0500
SubjectAfter Install/Run antivirus software classifies my EXEs as 'suspicious'
Message-ID<l90a9j$n0l$1@dont-email.me>
What does other installed apps have that prevents antivirus software 
from blocking them? I have a problem with being blocked regardless of 
where the app is located. Is there a standard 'flag' that needs 
setting, at design time, or registration action required on install?

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [next] | [standalone]


#1930

Fromralph <nt_consulting@yahoo.com>
Date2013-12-19 21:41 -0600
Message-ID<k4d7b9h627tv0vfn074ik2lskcpevtqape@4ax.com>
In reply to#1929
On Thu, 19 Dec 2013 21:33:20 -0500, GS <gs@somewhere.net> wrote:

>What does other installed apps have that prevents antivirus software 
>from blocking them? I have a problem with being blocked regardless of 
>where the app is located. Is there a standard 'flag' that needs 
>setting, at design time, or registration action required on install?

LOL.

First off, is this a joke? Of course there is no such 'flag'! If there
really was such a thing the very first step anyone, planning evil,
would do is to set the 'flag'. <G>

Your application is considered 'suspicious' because when scanned by
antivirus software it appears to contain malicious code.  Exactly what
that code might be can be difficult at times to determine. Your app
may in fact, albeit innocently, be attempting to do something
considered nefarious.

Take a hard look at what your application is doing. If it is taking
liberties with security - re-write it.

Or it may be a false positive. This happens on occasion and can come
about purely by accident. Some arrangement within your application of
perfectly benign statements creates a series of bits in the binary
which map 'signatures' of known malware.

Can be very tough to ferret out. Unfortunately, the usual procedure is
to remove blocks of functionality until you can isolate the problem to
a limited area, then often a simple rearrangement of code can resolve
the problem.

Then of course your compiler, components, or installer may have picked
up a virus. Is your development box clean?

Most antivirus software allow you to over-ride some complaints.
Generally consider unwise to grant exceptions but can be employed in a
pinch. In-house that is. Don't expect any customers to be so trusting.
<g>

-ralph



[toc] | [prev] | [next] | [standalone]


#1931

FromGS <gs@somewhere.net>
Date2013-12-19 23:03 -0500
Message-ID<l90fio$eg0$1@dont-email.me>
In reply to#1930
> First off, is this a joke? Of course there is no such 'flag'! If 
> there
> really was such a thing the very first step anyone, planning evil,
> would do is to set the 'flag'. <G>

Yeah.., dumb Q now that I think of it!
>
> Your application is considered 'suspicious' because when scanned by
> antivirus software it appears to contain malicious code.  Exactly 
> what
> that code might be can be difficult at times to determine. Your app
> may in fact, albeit innocently, be attempting to do something
> considered nefarious.

They're frontloader EXEs that automate Excel, mostly. (One is an actual 
 VB6 app)
>
> Take a hard look at what your application is doing. If it is taking
> liberties with security - re-write it.

Not the case, though they all use WMI at startup.
>
> Or it may be a false positive. This happens on occasion and can come
> about purely by accident. Some arrangement within your application of
> perfectly benign statements creates a series of bits in the binary
> which map 'signatures' of known malware.
>
> Can be very tough to ferret out. Unfortunately, the usual procedure 
> is
> to remove blocks of functionality until you can isolate the problem 
> to
> a limited area, then often a simple rearrangement of code can resolve
> the problem.

Perhaps I'll test without the code using WMI. Everything else is basic 
VB...
>
> Then of course your compiler, components, or installer may have 
> picked
> up a virus. Is your development box clean?

Yes!
>
> Most antivirus software allow you to over-ride some complaints.
> Generally consider unwise to grant exceptions but can be employed in 
> a
> pinch. In-house that is. 

Yeah, I have to set exceptions on their top level folder in my 
antivirus software.
> Don't expect any customers to be so trusting.

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1935

FromTony Toews <ttoews@telusplanet.net>
Date2013-12-19 22:59 -0700
Message-ID<m2n7b9ts74ta6d9nq6v6qjhs1j0goim41l@4ax.com>
In reply to#1930
On Thu, 19 Dec 2013 21:41:46 -0600, ralph <nt_consulting@yahoo.com>
wrote:
  
>Exactly what
>that code might be can be difficult at times to determine. 

I once had a Microsoft Access database with queries, forms, reports
and VBA code flagged as malicious.  I was happily working in it and my
A/V software happily deleted it on me.   

A true PITA to work with.  I sent a copy of the MDB to the anti virus
vendor and worked on something else for a few days until the problem
stopped happening after an update.

Tony

[toc] | [prev] | [next] | [standalone]


#1932

From"Mayayana" <mayayana@invalid.nospam>
Date2013-12-19 23:06 -0500
Message-ID<l90fn0$evo$1@dont-email.me>
In reply to#1929
Karl Peterson had an interesting piece about that
kind of problem a few years ago. I might be of some
value in your case:

http://visualstudiomagazine.com/articles/2008/01/29/are-you-safer-now.aspx

  I haven't noticed any particular trouble with AV, but
those programs have become blown way out of
proportion, and there's an increasing tendency to
simply cast suspicion on anything unknown. If it's
not a common, corporate program then it's guilty
until proven innocent.


"GS" <gs@somewhere.net> wrote in message news:l90a9j$n0l$1@dont-email.me...
| What does other installed apps have that prevents antivirus software
| from blocking them? I have a problem with being blocked regardless of
| where the app is located. Is there a standard 'flag' that needs
| setting, at design time, or registration action required on install?
|

[toc] | [prev] | [next] | [standalone]


#1933

FromGS <gs@somewhere.net>
Date2013-12-19 23:48 -0500
Message-ID<l90i7o$oph$1@dont-email.me>
In reply to#1932
> Karl Peterson had an interesting piece about that
> kind of problem a few years ago. I might be of some
> value in your case:
>
> http://visualstudiomagazine.com/articles/2008/01/29/are-you-safer-now.aspx
>
>   I haven't noticed any particular trouble with AV, but
> those programs have become blown way out of
> proportion, and there's an increasing tendency to
> simply cast suspicion on anything unknown. If it's
> not a common, corporate program then it's guilty
> until proven innocent.
>
>
> "GS" <gs@somewhere.net> wrote in message 
> news:l90a9j$n0l$1@dont-email.me...
>> What does other installed apps have that prevents antivirus software
>> from blocking them? I have a problem with being blocked regardless 
>> of where the app is located. Is there a standard 'flag' that needs
>> setting, at design time, or registration action required on install?

Thanks for that! My apps don't use the Registry for anything.., not 
even file associations! The jist of the article does align with Ralph's 
comments, though.

Just did some testing with apps that do use the Registry and they run 
fine. Also tested apps that don't use WMI and they also run fine. Looks 
like I might need to put that code in a DLL. Note that my Excel addins 
that use WMI run fine. Hmm...

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1938

From"Mayayana" <mayayana@invalid.nospam>
Date2013-12-20 08:32 -0500
Message-ID<l91gsg$cm3$1@dont-email.me>
In reply to#1933
| Just did some testing with apps that do use the Registry and they run
| fine.

   That was just an example he ran across. There could be
other strings that might have an effect. AV that I've seen
tends to be "dumb on the safe side", doing things like raising
flags on all .vbs files, simply because they were used years
ago to write malware, rather than looking at the code....
and all the while giving EXEs a pass.

| Also tested apps that don't use WMI and they also run fine. Looks
| like I might need to put that code in a DLL. Note that my Excel addins
| that use WMI run fine. Hmm...

  It seems odd that AV might be set off by WMI. It's
used extensively in corporate IT. On the other hand,
most of WMI is just bloated, slow, redundant wrappers.
I can't think of anything it has that isn't easily got
elsewhere, with one exception: The system information
functions are very extensive and seem to be in WMI-
specific libraries. Even in scripting I only use WMI for
system info and for the Registry functions (because
WScript.Shell.Reg* functions are not dependable). 

[toc] | [prev] | [next] | [standalone]


#1939

Fromralph <nt_consulting@yahoo.com>
Date2013-12-20 10:39 -0600
Message-ID<ufr8b9tnd7p2d311aocnlgfgrpljpea8nm@4ax.com>
In reply to#1938
On Fri, 20 Dec 2013 08:32:07 -0500, "Mayayana"
<mayayana@invalid.nospam> wrote:

>
>  It seems odd that AV might be set off by WMI. It's
>used extensively in corporate IT. On the other hand,
>most of WMI is just bloated, slow, redundant wrappers.
>I can't think of anything it has that isn't easily got
>elsewhere, with one exception: The system information
>functions are very extensive and seem to be in WMI-
>specific libraries. Even in scripting I only use WMI for
>system info and for the Registry functions (because
>WScript.Shell.Reg* functions are not dependable). 
>

Just for the record, you do understand that WMI (Microsoft Windows
Management Instrumentation) is design for *script* administrative
management? It is based on an Industry Standard (CIM). 

http://en.wikipedia.org/wiki/Common_Management_Information_Protocol

"Lean 'n mean" has never been a goal. <g>

-ralph

[toc] | [prev] | [next] | [standalone]


#1949

From"Mayayana" <mayayana@invalid.nospam>
Date2013-12-20 18:09 -0500
Message-ID<l92imm$3ub$1@dont-email.me>
In reply to#1939
| Just for the record, you do understand that WMI (Microsoft Windows
| Management Instrumentation) is design for *script* administrative
| management? It is based on an Industry Standard (CIM).
| http://en.wikipedia.org/wiki/Common_Management_Information_Protocol
|
| "Lean 'n mean" has never been a goal. <g>
|
   But it's noticeably slow even compared to VBS.
I can't say I'm impressed with official "industry
standards", either. WMI is monstrously designed.
It's such a mess that I have to look up the syntax
and copy/paste every time I use it. On top of all
that, it provides very little that script can't already
do.

  Oddly, I remember VBPJ doing an excited feature
issue on WMI when it came out. It was touted as
an almost endless, new toolbox for VB. 

[toc] | [prev] | [next] | [standalone]


#1950

Fromralph <nt_consulting@yahoo.com>
Date2013-12-20 17:22 -0600
Message-ID<a5k9b9t6oh0jsovese7pn0q0m1i6i01iad@4ax.com>
In reply to#1949
On Fri, 20 Dec 2013 18:09:17 -0500, "Mayayana"
<mayayana@invalid.nospam> wrote:

>| Just for the record, you do understand that WMI (Microsoft Windows
>| Management Instrumentation) is design for *script* administrative
>| management? It is based on an Industry Standard (CIM).
>| http://en.wikipedia.org/wiki/Common_Management_Information_Protocol
>|
>| "Lean 'n mean" has never been a goal. <g>
>|
>   But it's noticeably slow even compared to VBS.
>I can't say I'm impressed with official "industry
>standards", either. WMI is monstrously designed.
>It's such a mess that I have to look up the syntax
>and copy/paste every time I use it. On top of all
>that, it provides very little that script can't already
>do.
>
>  Oddly, I remember VBPJ doing an excited feature
>issue on WMI when it came out. It was touted as
>an almost endless, new toolbox for VB. 
>

True.

Anything "scripting" to most of the IT industry meant (and still
means) "VB". <g>

-ralph

[toc] | [prev] | [next] | [standalone]


#1941

FromGS <gs@somewhere.net>
Date2013-12-20 13:05 -0500
Message-ID<l920tu$g0q$1@dont-email.me>
In reply to#1938
>> Just did some testing with apps that do use the Registry and they 
>> run fine.
>
>    That was just an example he ran across. There could be
> other strings that might have an effect. AV that I've seen
> tends to be "dumb on the safe side", doing things like raising
> flags on all .vbs files, simply because they were used years
> ago to write malware, rather than looking at the code....
> and all the while giving EXEs a pass.
>
>> Also tested apps that don't use WMI and they also run fine. Looks
>> like I might need to put that code in a DLL. Note that my Excel 
>> addins that use WMI run fine. Hmm...
>
>   It seems odd that AV might be set off by WMI. It's
> used extensively in corporate IT. On the other hand,
> most of WMI is just bloated, slow, redundant wrappers.
> I can't think of anything it has that isn't easily got
> elsewhere, with one exception: The system information
> functions are very extensive and seem to be in WMI-
> specific libraries. Even in scripting I only use WMI for
> system info and for the Registry functions (because
> WScript.Shell.Reg* functions are not dependable). 

I find this interesting that all my EXEs using WMI get blocked by a/v, 
and all that don't use it run fine! Note that I use your recommended 
method for creating a ref late bound. Perhaps it's the way the code is 
structured, because the apps don't mess with anything other than their 
own files, and user files saved to wherever. Note also that, in 
deference to Tony's report, none of my VBA projects using WMI have 
problems with a/v apps.

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1934

From"Farnsworth" <nospam@nospam.com>
Date2013-12-20 00:01 -0500
Message-ID<l90ivn$5cv$1@speranza.aioe.org>
In reply to#1929
"GS" <gs@somewhere.net> wrote in message news:l90a9j$n0l$1@dont-email.me...
> What does other installed apps have that prevents antivirus software from 
> blocking them? I have a problem with being blocked regardless of where the 
> app is located. Is there a standard 'flag' that needs setting, at design 
> time, or registration action required on install?

Try using Virus Total:

https://www.virustotal.com/

McAfee is well known for flagging many EXE's as suspicious even when all 
other AV program say it's clean. 

[toc] | [prev] | [next] | [standalone]


#1946

FromGS <gs@somewhere.net>
Date2013-12-20 14:50 -0500
Message-ID<l92720$n5i$1@dont-email.me>
In reply to#1934
> "GS" <gs@somewhere.net> wrote in message 
> news:l90a9j$n0l$1@dont-email.me...
>> What does other installed apps have that prevents antivirus 
>> software from blocking them? I have a problem with being blocked 
>> regardless of where the app is located. Is there a standard 'flag' 
>> that needs setting, at design time, or registration action required 
>> on install?
>
> Try using Virus Total:
>
> https://www.virustotal.com/
>
> McAfee is well known for flagging many EXE's as suspicious even when 
> all other AV program say it's clean.

Thanks for your suggestion!
Did this and got a clean bill for 49 a/v apps (including mine). I 
submitted the file to Avast for analysis of 'false positive'!

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1936

FromTony Toews <ttoews@telusplanet.net>
Date2013-12-19 23:02 -0700
Message-ID<m8n7b9d1qo7n26pr64om1e3crue9qosdde@4ax.com>
In reply to#1929
On Thu, 19 Dec 2013 21:33:20 -0500, GS <gs@somewhere.net> wrote:
  
>What does other installed apps have that prevents antivirus software 
>from blocking them? I have a problem with being blocked regardless of 
>where the app is located. 

Is there an exact type of message or virus definition name from the
client?   What A/V software are they using?  Can you setup a repro on
a guest OS?

Also try rearranging the order of a few subroutine/function calls each
each module.   <shrug>  Just guessing.

Tony

[toc] | [prev] | [next] | [standalone]


#1937

FromObiWan <obiwan@mvps.org>
Date2013-12-20 08:29 +0100
Message-ID<20131220082906.00005e4e@albasani.net>
In reply to#1929
:: On Thu, 19 Dec 2013 21:33:20 -0500
:: (comp.lang.basic.visual.misc,microsoft.public.vb.general.discussion)
:: <l90a9j$n0l$1@dont-email.me>
:: GS <gs@somewhere.net> wrote:

> What does other installed apps have that prevents antivirus software 
> from blocking them? I have a problem with being blocked regardless of 
> where the app is located. Is there a standard 'flag' that needs 
> setting, at design time, or registration action required on install?

what does the AV software report ? I mean, which "virus" name ?

Also, try uploading your exe to https://www.virustotal.com/ scan it
and check which AVs are flagging your app and "how" (virus name)

then just check the details related to that malware and you'll see why
the AVs are flagging your app and possibly find a way to solve the
issue
 

[toc] | [prev] | [next] | [standalone]


#1940

FromGS <gs@somewhere.net>
Date2013-12-20 12:57 -0500
Message-ID<l920f0$csg$1@dont-email.me>
In reply to#1937
>>> On Thu, 19 Dec 2013 21:33:20 -0500
>>> (comp.lang.basic.visual.misc,microsoft.public.vb.general.discussion)
>>> <l90a9j$n0l$1@dont-email.me>
>>> GS <gs@somewhere.net> wrote:
>
>> What does other installed apps have that prevents antivirus software 
>> from blocking them? I have a problem with being blocked regardless 
>> of  where the app is located. Is there a standard 'flag' that needs 
>> setting, at design time, or registration action required on install?
>
> what does the AV software report ? I mean, which "virus" name ?
>
> Also, try uploading your exe to https://www.virustotal.com/ scan it
> and check which AVs are flagging your app and "how" (virus name)
>
> then just check the details related to that malware and you'll see 
> why the AVs are flagging your app and possibly find a way to solve 
> the issue

Thanks! This is what Farnsworth suggested also. Looks worth a try...

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1942 — a/v report

FromGS <gs@somewhere.net>
Date2013-12-20 13:16 -0500
Subjecta/v report
Message-ID<l921i2$k6b$1@dont-email.me>
In reply to#1929
The a/v reports Win32:evo-gen [susp] as the virus.

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1943 — Re: a/v report

From"Farnsworth" <nospam@nospam.com>
Date2013-12-20 14:21 -0500
SubjectRe: a/v report
Message-ID<l925cs$tih$1@speranza.aioe.org>
In reply to#1942
"GS" <gs@somewhere.net> wrote in message news:l921i2$k6b$1@dont-email.me...
> The a/v reports Win32:evo-gen [susp] as the virus.
>
> -- 
> Garry
>
> Free usenet access at http://www.eternal-september.org
> Classic VB Users Regroup!
>  comp.lang.basic.visual.misc
>  microsoft.public.vb.general.discussion
>
>
>
> ---
> This email is free from viruses and malware because avast! Antivirus 
> protection is active.
> http://www.avast.com

[Added GS to the "Do not respond to" list]

[toc] | [prev] | [next] | [standalone]


#1944 — Re: a/v report

FromGS <gs@somewhere.net>
Date2013-12-20 14:28 -0500
SubjectRe: a/v report
Message-ID<l925p7$fcl$1@dont-email.me>
In reply to#1943
> "GS" <gs@somewhere.net> wrote in message 
> news:l921i2$k6b$1@dont-email.me...
>> The a/v reports Win32:evo-gen [susp] as the virus.
>>
>> -- Garry
>>
>> Free usenet access at http://www.eternal-september.org
>> Classic VB Users Regroup!
>>  comp.lang.basic.visual.misc
>>  microsoft.public.vb.general.discussion
>>
>>
>>
>> ---
>> This email is free from viruses and malware because avast! 
>> Antivirus protection is active.
>> http://www.avast.com
>
> [Added GS to the "Do not respond to" list]

??

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1963 — Re: a/v report

From"CoderX" <coder@x.com>
Date2013-12-22 12:57 -0500
SubjectRe: a/v report
Message-ID<l9796n$4nh$1@dont-email.me>
In reply to#1944
>> [Added GS to the "Do not respond to" list]
>
> ??

He's trying to say politely that you're a goofus and he's not wasting time 
on you anymore.  Clear enough? 

[toc] | [prev] | [next] | [standalone]


Page 1 of 4  [1] 2 3 4  Next page →

Back to top | Article view | comp.lang.basic.visual.misc


csiph-web