Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.basic.visual.misc > #1929 > unrolled thread
| Started by | GS <gs@somewhere.net> |
|---|---|
| First post | 2013-12-19 21:33 -0500 |
| Last post | 2013-12-23 12:09 -0700 |
| Articles | 20 on this page of 61 — 11 participants |
Back to article view | Back to comp.lang.basic.visual.misc
After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 21:33 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-19 21:41 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:03 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 22:59 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-19 23:06 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:48 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 08:32 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 10:39 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 18:09 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 17:22 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 13:05 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Farnsworth" <nospam@nospam.com> - 2013-12-20 00:01 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 14:50 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 23:02 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2013-12-20 08:29 +0100
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 12:57 -0500
a/v report GS <gs@somewhere.net> - 2013-12-20 13:16 -0500
Re: a/v report "Farnsworth" <nospam@nospam.com> - 2013-12-20 14:21 -0500
Re: a/v report GS <gs@somewhere.net> - 2013-12-20 14:28 -0500
Re: a/v report "CoderX" <coder@x.com> - 2013-12-22 12:57 -0500
Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
Re: a/v report "Brian Kelly" <Brian@mcmail.com.not> - 2013-12-20 20:52 +0000
Re: a/v report GS <gs@somewhere.net> - 2013-12-20 16:08 -0500
Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-21 12:36 +0100
Re: a/v report ralph <nt_consulting@yahoo.com> - 2013-12-21 07:12 -0600
Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
Re: a/v report GS <gs@somewhere.net> - 2013-12-21 10:54 -0500
Re: a/v report ObiWan <obiwan@mvps.org> - 2013-12-22 18:08 +0100
Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:11 +0100
VirusTotal report GS <gs@somewhere.net> - 2013-12-20 14:34 -0500
Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-22 12:59 -0500
Re: VirusTotal report Tony Toews <ttoews@telusplanet.net> - 2013-12-22 12:52 -0700
Re: VirusTotal report GS <gs@somewhere.net> - 2013-12-22 19:51 -0500
Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:57 -0500
Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:59 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 17:28 +0530
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 09:08 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 10:59 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 14:53 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:06 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:40 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 22:58 +0530
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 13:43 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 09:08 +0000
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 03:04 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 10:24 +0000
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 11:42 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 11:25 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 12:48 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:08 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 13:54 -0600
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:06 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 15:15 -0500
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 14:49 +0000
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:03 +0100
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 15:06 +0000
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:17 +0100
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2014-01-04 23:23 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-05 17:09 +0100
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 11:58 -0700
Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:09 -0700
Page 2 of 4 — ← Prev page 1 [2] 3 4 Next page →
| From | Wolfgang Enzinger <we_usenet@nurfuerspam.de> |
|---|---|
| Date | 2013-12-23 23:12 +0100 |
| Subject | Re: a/v report |
| Message-ID | <v8ahb99kv4cuu7ibmmhccn6m973skv1j5f@4ax.com> |
| In reply to | #1944 |
GS <gs@somewhere.net> wrote: >> "GS" <gs@somewhere.net> wrote in message >> news:l921i2$k6b$1@dont-email.me... >>> The a/v reports Win32:evo-gen [susp] as the virus. >>> >>> -- Garry >>> >>> Free usenet access at http://www.eternal-september.org >>> Classic VB Users Regroup! >>> comp.lang.basic.visual.misc >>> microsoft.public.vb.general.discussion >>> >>> >>> >>> --- >>> This email is free from viruses and malware because avast! >>> Antivirus protection is active. >>> http://www.avast.com >> >> [Added GS to the "Do not respond to" list] > >?? I guess the confusion might be a result of the subject change. Some newsclients then display that post as beginning of a new thread. So in Farnsworth's perception this post may have looked like off-topic, if not like spam (with regard to the Avast footer ;-) Wolfgang
[toc] | [prev] | [next] | [standalone]
| From | "Brian Kelly" <Brian@mcmail.com.not> |
|---|---|
| Date | 2013-12-20 20:52 +0000 |
| Subject | Re: a/v report |
| Message-ID | <A62tu.32569$fY2.4305@fx04.am4> |
| In reply to | #1942 |
GS wrote: > The a/v reports Win32:evo-gen [susp] as the virus. I've had a few of those from Avast disk scans recently, usually against perfectly innocuous stuff I've been using for years -- Brian Kelly Home Page http://kellybk.com Follow me on Twitter http://twitter.com/Bra1nK
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-20 16:08 -0500 |
| Subject | Re: a/v report |
| Message-ID | <l92bl2$kr3$1@dont-email.me> |
| In reply to | #1947 |
> GS wrote: >> The a/v reports Win32:evo-gen [susp] as the virus. > > I've had a few of those from Avast disk scans recently, usually > against perfectly innocuous stuff I've been using for years Thanks! It's good to know that it's just not me. I have submitted the file to Avast for analysis of a 'false positive' and so I'm anxious for there reply. Note that TotalVirus scored the file 0/49, which included Avast. I keep Avast up to date but I don't know what version TotalVirus uses. What's interesting is that multiple scans of its folder report no threats!!! Something 'bugy' about that... -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | Wolfgang Enzinger <we_usenet@nurfuerspam.de> |
|---|---|
| Date | 2013-12-21 12:36 +0100 |
| Subject | Re: a/v report |
| Message-ID | <160vhju88kgsj.3bpwc9j6ky7v.dlg@40tude.net> |
| In reply to | #1948 |
Am Fri, 20 Dec 2013 16:08:48 -0500 schrieb GS: >> GS wrote: >>> The a/v reports Win32:evo-gen [susp] as the virus. >> >> I've had a few of those from Avast disk scans recently, usually >> against perfectly innocuous stuff I've been using for years > > Thanks! It's good to know that it's just not me. I have submitted the > file to Avast for analysis of a 'false positive' and so I'm anxious for I've had all kinds of issues with AV software and my applications in the past, all of them being confirmed to be false positives so far. Submitting the file to the AV vendor is the way to go. > there reply. Note that TotalVirus scored the file 0/49, which included > Avast. I keep Avast up to date but I don't know what version TotalVirus > uses. What's interesting is that multiple scans of its folder report no > threats!!! Something 'bugy' about that... [susp] as mentioned above obviously means that the AV software thinks it detected some suspicious behaviour. This is called "heuristic analysis" and is nothing more than pure speculation. Therefore oftenly this kind of analysis can be disabled. This may explain the difference between your own and the VirusTotal result. The reasons for such a false classification can be astonishing sometimes. Once I had an application that was marked as Malware by some scanner. I sent it to that company, they confirmed the false classification and whitelisted the application's checksum in their signature file. However, I had to make frequent changes / additions to this app, so every new version was falsely flagged again. After some time I told them that whitelisting is no longer a solution. They gave me a hint: I should move my project files to a different directory. Why? I used to compile that app with debug info, so the project path was compiled into the EXE. And this path contained the string "encrypted". This alone was enough to trigger the false positive. Duh. Currently I have another issue with another AV vendor. One of my applications retrieves data (images, XML) from the Intra- / Internet via HTTP. Now some customers reported that constantly these data are corrupted. I found out that the data stream was interrupted by a certain scanner somewhere in the middle of the receiving process. I contacted the AV vendor, they were actually grateful for my hint and are working on a patch right now. They were absolutely unaware of that behaviour and the fact that the data stream interruption isn't even reported in any log file. Wolfgang
[toc] | [prev] | [next] | [standalone]
| From | ralph <nt_consulting@yahoo.com> |
|---|---|
| Date | 2013-12-21 07:12 -0600 |
| Subject | Re: a/v report |
| Message-ID | <h14bb913o54cor50ifa140iqk5sve8c4i5@4ax.com> |
| In reply to | #1951 |
On Sat, 21 Dec 2013 12:36:42 +0100, Wolfgang Enzinger <we_usenet@nurfuerspam.de> wrote: > snipped > >The reasons for such a false classification can be astonishing sometimes. >Once I had an application that was marked as Malware by some scanner. I >sent it to that company, they confirmed the false classification and >whitelisted the application's checksum in their signature file. However, I >had to make frequent changes / additions to this app, so every new version >was falsely flagged again. After some time I told them that whitelisting is >no longer a solution. They gave me a hint: I should move my project files >to a different directory. Why? I used to compile that app with debug info, >so the project path was compiled into the EXE. And this path contained the >string "encrypted". This alone was enough to trigger the false positive. >Duh. > Wow. Thanks for sharing that. I've often wondered if certain 'words', embedded strings in the data section, could trigger AV complaints. Then I said to myself - Naw! They wouldn't do anything like that. It has to be binary. <bg> >Currently I have another issue with another AV vendor. One of my >applications retrieves data (images, XML) from the Intra- / Internet via >HTTP. Now some customers reported that constantly these data are corrupted. >I found out that the data stream was interrupted by a certain scanner >somewhere in the middle of the receiving process. I contacted the AV >vendor, they were actually grateful for my hint and are working on a patch >right now. They were absolutely unaware of that behaviour and the fact that >the data stream interruption isn't even reported in any log file. > I too have been pleasantly surprised at how quickly and well AV vendors will work with you on specific problems. Of course you have to be very specific when you talk to them. Cursing and ranting that it "doesn't work" doesn't get you very far. <g> -ralph
[toc] | [prev] | [next] | [standalone]
| From | Wolfgang Enzinger <we_usenet@nurfuerspam.de> |
|---|---|
| Date | 2013-12-23 23:12 +0100 |
| Subject | Re: a/v report |
| Message-ID | <biahb9la3g8t9jm0u8usa9jkfu7240vplk@4ax.com> |
| In reply to | #1953 |
ralph <nt_consulting@yahoo.com> wrote: >I too have been pleasantly surprised at how quickly and well AV >vendors will work with you on specific problems. Of course you have to >be very specific when you talk to them. Cursing and ranting that it >"doesn't work" doesn't get you very far. <g> Usually being the receiving end of such complaint transmissions makes it easy to figure that out. ;-) Wolfgang
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-21 10:54 -0500 |
| Subject | Re: a/v report |
| Message-ID | <l94dju$fv6$1@dont-email.me> |
| In reply to | #1951 |
Large thanks! I ditto Ralph's remarks. Interesting about the string "encrypted" because all of the apps being blocked contain crypto code because their sole purpose is to validate licensing, and store license validation in encrypted files. -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | ObiWan <obiwan@mvps.org> |
|---|---|
| Date | 2013-12-22 18:08 +0100 |
| Subject | Re: a/v report |
| Message-ID | <20131222180801.00006672@albasani.net> |
| In reply to | #1951 |
> Currently I have another issue with another AV vendor. One of my > applications retrieves data (images, XML) from the Intra- / Internet > via HTTP. Now some customers reported that constantly these data are > corrupted. I found out that the data stream was interrupted by a > certain scanner somewhere in the middle of the receiving process. lemme guess... Sophos :) ?
[toc] | [prev] | [next] | [standalone]
| From | Wolfgang Enzinger <we_usenet@nurfuerspam.de> |
|---|---|
| Date | 2013-12-23 23:11 +0100 |
| Subject | Re: a/v report |
| Message-ID | <q2ahb9th9b7upeoaf907ve3d873ufrmkd8@4ax.com> |
| In reply to | #1962 |
ObiWan <obiwan@mvps.org> wrote: > >> Currently I have another issue with another AV vendor. One of my >> applications retrieves data (images, XML) from the Intra- / Internet >> via HTTP. Now some customers reported that constantly these data are >> corrupted. I found out that the data stream was interrupted by a >> certain scanner somewhere in the middle of the receiving process. > >lemme guess... Sophos :) ? Nope, TrendMicro, in my case. Wolfgang
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-20 14:34 -0500 |
| Subject | VirusTotal report |
| Message-ID | <l9264d$hkm$1@dont-email.me> |
| In reply to | #1929 |
VirusTotal reports 0/49, meaning no virus found by 49 a/v apps. (Including mine!) -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | "CoderX" <coder@x.com> |
|---|---|
| Date | 2013-12-22 12:59 -0500 |
| Subject | Re: VirusTotal report |
| Message-ID | <l9799a$558$1@dont-email.me> |
| In reply to | #1945 |
Dude, seriously? File under 'who gives a fuck' and stop posting OT shit. Or find another forum, as pertains to VB, this does not. "GS" <gs@somewhere.net> wrote in message news:l9264d$hkm$1@dont-email.me... > VirusTotal reports 0/49, meaning no virus found by 49 a/v apps. (Including > mine!) > > -- > Garry > > Free usenet access at http://www.eternal-september.org > Classic VB Users Regroup! > comp.lang.basic.visual.misc > microsoft.public.vb.general.discussion > > > > --- > This email is free from viruses and malware because avast! Antivirus > protection is active. > http://www.avast.com >
[toc] | [prev] | [next] | [standalone]
| From | Tony Toews <ttoews@telusplanet.net> |
|---|---|
| Date | 2013-12-22 12:52 -0700 |
| Subject | Re: VirusTotal report |
| Message-ID | <glgeb9t27il482pdsqmp0o6bjt3abgpmn0@4ax.com> |
| In reply to | #1964 |
On Sun, 22 Dec 2013 12:59:04 -0500, "CoderX" <coder@x.com> wrote: >Dude, seriously? File under 'who gives a fuck' and stop posting OT shit. >Or find another forum, as pertains to VB, this does not. From the subject of his original posting "After Install/Run antivirus software classifies my EXEs as 'suspicious'" How is that off topic? Assuming his exe is a VB6 exe. Tony
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-22 19:51 -0500 |
| Subject | Re: VirusTotal report |
| Message-ID | <l981do$k6h$1@dont-email.me> |
| In reply to | #1965 |
> On Sun, 22 Dec 2013 12:59:04 -0500, "CoderX" <coder@x.com> wrote: > >> Dude, seriously? File under 'who gives a fuck' and stop posting OT >> shit. Or find another forum, as pertains to VB, this does not. > > From the subject of his original posting "After Install/Run antivirus > software classifies my EXEs as 'suspicious'" How is that off topic? > Assuming his exe is a VB6 exe. > > Tony Added CoderX to "Do NOT respond to" List!<g> -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | "CoderX" <coder@x.com> |
|---|---|
| Date | 2013-12-23 15:57 -0500 |
| Subject | Re: VirusTotal report |
| Message-ID | <l9a83o$tos$1@dont-email.me> |
| In reply to | #1966 |
"GS" <gs@somewhere.net> wrote in message news:l981do$k6h$1@dont-email.me... > Added CoderX to "Do NOT respond to" List!<g> OH NOES! Whatevers will I do? I'm...I'm, just so broken on the inside now. How can I go on? LOL! Goofus.
[toc] | [prev] | [next] | [standalone]
| From | "CoderX" <coder@x.com> |
|---|---|
| Date | 2013-12-23 15:59 -0500 |
| Subject | Re: VirusTotal report |
| Message-ID | <l9a89r$v8v$1@dont-email.me> |
| In reply to | #1965 |
"Tony Toews" <ttoews@telusplanet.net> wrote in message news:glgeb9t27il482pdsqmp0o6bjt3abgpmn0@4ax.com... > On Sun, 22 Dec 2013 12:59:04 -0500, "CoderX" <coder@x.com> wrote: > >>Dude, seriously? File under 'who gives a fuck' and stop posting OT shit. >>Or find another forum, as pertains to VB, this does not. > > From the subject of his original posting "After Install/Run antivirus > software classifies my EXEs as 'suspicious'" How is that off topic? > Assuming his exe is a VB6 exe. It's off topic (now) because it's an AV problem, and posts on reports is kinda irrelevent. On the Inno board, we direct peeps to the AV website and have them report it there. Just sayin'. I don't suppose we could start a political discourse and at least make it interesting?
[toc] | [prev] | [next] | [standalone]
| From | "Abhishek" <abhishek007p@hotmail.com> |
|---|---|
| Date | 2013-12-21 17:28 +0530 |
| Message-ID | <l93vpf$4dr$1@dont-email.me> |
| In reply to | #1929 |
It is a false positive, and quite common, you need to report it to the AV company to get it resolved. you can also scan you exe using virustotal.com Possible Reaons for false positive - * compressing the exe using a exe complressor * downloading files from internet and opening them without user consent * using some kind of trial schemes * working with memory directly you need to find out the code which is causing the problem, rewrite it or remove it. that is the only way forward. -- Abhishek P http://vb6zone.blogspot.com "GS" <gs@somewhere.net> wrote in message news:l90a9j$n0l$1@dont-email.me... | What does other installed apps have that prevents antivirus software | from blocking them? I have a problem with being blocked regardless of | where the app is located. Is there a standard 'flag' that needs | setting, at design time, or registration action required on install? | | -- | Garry | | Free usenet access at http://www.eternal-september.org | Classic VB Users Regroup! | comp.lang.basic.visual.misc | microsoft.public.vb.general.discussion | | | | --- | This email is free from viruses and malware because avast! Antivirus protection is active. | http://www.avast.com |
[toc] | [prev] | [next] | [standalone]
| From | "Mayayana" <mayayana@invalid.nospam> |
|---|---|
| Date | 2013-12-21 09:08 -0500 |
| Message-ID | <l947d2$di0$1@dont-email.me> |
| In reply to | #1952 |
| you need to find out the code which is causing the problem, rewrite it or
| remove it. that is the only way forward.
|
Unfortunately, AV programs are getting bigger
and more aggressive, which probably makes sense
for them. As long as they don't flag programs like
MS Office, Photoshop and AutoCad, the vast majority
of potential customers will only know them for their
success rate, so they don't stand to lose much
with reckless flagging of unknown programs.
I only know two people using AV. Both are using
Avast, which I set up for them. Avast doesn't seem
to be too bad. But I did run into trouble with it on a
recent program I wrote to get Google streetview/maps/
satellite. Avast, like many other AV programs, has added
everything but the kitchen sink, expanding out into
quasi-firewall activity. Their "web shield" and "network
shield" functions flagged my program as malware because
it's trying to go online, which is considered suspicious.
I don't write to companies like that. It's a losing battle.
I just try to inform potential end-users of the issue.
I wouldn't have even known about the Avast problem if
I hadn't tried to run my software on a friend's machine.
I haven't used AV since about 2000.
For anyone who distributes software, rewriting it
is not much of a way forward. If you fix a false
positive from your own AV there might easily be 4
more false positives from other vendors that you'll
never hear about.
It's increasingly becoming a situation where non-
corporate software is simply not welcome, but there's
also the problem of AV software simply being
overproduced. I've been noticing a fairly new bit of
nonsense lately: I can tell which visitors to my website
use Trendmicro AV because whenever they download a
ZIP or EXE, Trendmicro follows a few seconds later,
downloading at least one copy themselves. And they
don't keep track of what they've downloaded. They
seem to be scanning the source in real time. Every time
a file is downloaded, they download it. It doesn't make
any sense at all, since the same file is being downloaded
to the client machine where their AV is presumably running.
Trendmicro seems to be building a sort of Rube Goldberg
database, filled with lots of data about lots of binaries
online -- all of which data is classified outdated in the
instant it's been stored. I'm considering blocking the whole
Trendmicro range via .htaccess. ...But then what if
Symantec gets the idea? If Trendmicro can be idiotic,
Symantec can surely outdo them. :)
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-21 10:59 -0500 |
| Message-ID | <l94dsq$hit$1@dont-email.me> |
| In reply to | #1954 |
Well.., not meaning to throw a wrench at you *but* I use Avast and it's causing the problem! What burns me is that scanning the file returns 'No threats found' both on my machine[s] and TotalVirus. Wolfgang did present some interesting thoughts... -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
| From | "Mayayana" <mayayana@invalid.nospam> |
|---|---|
| Date | 2013-12-21 14:53 -0500 |
| Message-ID | <l94rjt$65n$1@dont-email.me> |
| In reply to | #1956 |
"GS" <gs@somewhere.net> wrote in message news:l94dsq$hit$1@dont-email.me... | Well.., not meaning to throw a wrench at you *but* I use Avast and it's | causing the problem! What burns me is that scanning the file returns | 'No threats found' both on my machine[s] and TotalVirus. | I wonder if that could be similar to my case. I didn't get any virus alert. It just blocked me going online. In fact, as I recall, I think I even set my EXE as an exemption. But the various "shields" don't seem to be in sync with the AV part of the program.
[toc] | [prev] | [next] | [standalone]
| From | GS <gs@somewhere.net> |
|---|---|
| Date | 2013-12-21 16:06 -0500 |
| Message-ID | <l94vsk$uvg$1@dont-email.me> |
| In reply to | #1959 |
> "GS" <gs@somewhere.net> wrote in message > news:l94dsq$hit$1@dont-email.me... >> Well.., not meaning to throw a wrench at you *but* I use Avast and >> it's causing the problem! What burns me is that scanning the file >> returns 'No threats found' both on my machine[s] and TotalVirus. >> > > I wonder if that could be similar to my case. I > didn't get any virus alert. It just blocked me going > online. In fact, as I recall, I think I even set my > EXE as an exemption. But the various "shields" > don't seem to be in sync with the AV part of the > program. I'm inclined to agree! I submitted the file to Avast and so I'm waiting on a reply from them. -- Garry Free usenet access at http://www.eternal-september.org Classic VB Users Regroup! comp.lang.basic.visual.misc microsoft.public.vb.general.discussion --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
[toc] | [prev] | [next] | [standalone]
Page 2 of 4 — ← Prev page 1 [2] 3 4 Next page →
Back to top | Article view | comp.lang.basic.visual.misc
csiph-web