Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.basic.visual.misc > #1929 > unrolled thread

After Install/Run antivirus software classifies my EXEs as 'suspicious'

Started byGS <gs@somewhere.net>
First post2013-12-19 21:33 -0500
Last post2013-12-23 12:09 -0700
Articles 20 on this page of 61 — 11 participants

Back to article view | Back to comp.lang.basic.visual.misc


Contents

  After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 21:33 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-19 21:41 -0600
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:03 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 22:59 -0700
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-19 23:06 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-19 23:48 -0500
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 08:32 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 10:39 -0600
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-20 18:09 -0500
              Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-20 17:22 -0600
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 13:05 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Farnsworth" <nospam@nospam.com> - 2013-12-20 00:01 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 14:50 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-19 23:02 -0700
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2013-12-20 08:29 +0100
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-20 12:57 -0500
    a/v report GS <gs@somewhere.net> - 2013-12-20 13:16 -0500
      Re: a/v report "Farnsworth" <nospam@nospam.com> - 2013-12-20 14:21 -0500
        Re: a/v report GS <gs@somewhere.net> - 2013-12-20 14:28 -0500
          Re: a/v report "CoderX" <coder@x.com> - 2013-12-22 12:57 -0500
          Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
      Re: a/v report "Brian Kelly" <Brian@mcmail.com.not> - 2013-12-20 20:52 +0000
        Re: a/v report GS <gs@somewhere.net> - 2013-12-20 16:08 -0500
          Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-21 12:36 +0100
            Re: a/v report ralph <nt_consulting@yahoo.com> - 2013-12-21 07:12 -0600
              Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:12 +0100
            Re: a/v report GS <gs@somewhere.net> - 2013-12-21 10:54 -0500
            Re: a/v report ObiWan <obiwan@mvps.org> - 2013-12-22 18:08 +0100
              Re: a/v report Wolfgang Enzinger <we_usenet@nurfuerspam.de> - 2013-12-23 23:11 +0100
    VirusTotal report GS <gs@somewhere.net> - 2013-12-20 14:34 -0500
      Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-22 12:59 -0500
        Re: VirusTotal report Tony Toews <ttoews@telusplanet.net> - 2013-12-22 12:52 -0700
          Re: VirusTotal report GS <gs@somewhere.net> - 2013-12-22 19:51 -0500
            Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:57 -0500
          Re: VirusTotal report "CoderX" <coder@x.com> - 2013-12-23 15:59 -0500
    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 17:28 +0530
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 09:08 -0500
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 10:59 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Mayayana" <mayayana@invalid.nospam> - 2013-12-21 14:53 -0500
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:06 -0500
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 16:40 -0500
      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' "Abhishek" <abhishek007p@hotmail.com> - 2013-12-21 22:58 +0530
        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-21 13:43 -0500
          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 09:08 +0000
            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 03:04 -0700
              Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2013-12-23 10:24 +0000
                Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 11:42 -0500
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 11:25 -0600
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 12:48 -0500
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:08 -0700
                      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ralph <nt_consulting@yahoo.com> - 2013-12-23 13:54 -0600
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:06 -0700
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' GS <gs@somewhere.net> - 2013-12-23 15:15 -0500
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 14:49 +0000
                    Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:03 +0100
                      Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Deanna Earley <dee.earley@icode.co.uk> - 2014-01-02 15:06 +0000
                        Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-02 16:17 +0100
                          Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2014-01-04 23:23 -0700
                            Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' ObiWan <obiwan@mvps.org> - 2014-01-05 17:09 +0100
                Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 11:58 -0700
                  Re: After Install/Run antivirus software classifies my EXEs as 'suspicious' Tony Toews <ttoews@telusplanet.net> - 2013-12-23 12:09 -0700

Page 2 of 4 — ← Prev page 1 [2] 3 4  Next page →


#1982 — Re: a/v report

FromWolfgang Enzinger <we_usenet@nurfuerspam.de>
Date2013-12-23 23:12 +0100
SubjectRe: a/v report
Message-ID<v8ahb99kv4cuu7ibmmhccn6m973skv1j5f@4ax.com>
In reply to#1944
GS <gs@somewhere.net> wrote:

>> "GS" <gs@somewhere.net> wrote in message 
>> news:l921i2$k6b$1@dont-email.me...
>>> The a/v reports Win32:evo-gen [susp] as the virus.
>>>
>>> -- Garry
>>>
>>> Free usenet access at http://www.eternal-september.org
>>> Classic VB Users Regroup!
>>>  comp.lang.basic.visual.misc
>>>  microsoft.public.vb.general.discussion
>>>
>>>
>>>
>>> ---
>>> This email is free from viruses and malware because avast! 
>>> Antivirus protection is active.
>>> http://www.avast.com
>>
>> [Added GS to the "Do not respond to" list]
>
>??

I guess the confusion might be a result of the subject change. Some
newsclients then display that post as beginning of a new thread. So in
Farnsworth's perception this post may have looked like off-topic, if not like
spam (with regard to the Avast footer ;-)

Wolfgang

[toc] | [prev] | [next] | [standalone]


#1947 — Re: a/v report

From"Brian Kelly" <Brian@mcmail.com.not>
Date2013-12-20 20:52 +0000
SubjectRe: a/v report
Message-ID<A62tu.32569$fY2.4305@fx04.am4>
In reply to#1942
GS wrote:
> The a/v reports Win32:evo-gen [susp] as the virus.

I've had a few of those from Avast disk scans recently, usually against 
perfectly innocuous stuff I've been using for years

-- 
Brian Kelly
Home Page http://kellybk.com
Follow me on Twitter http://twitter.com/Bra1nK 

[toc] | [prev] | [next] | [standalone]


#1948 — Re: a/v report

FromGS <gs@somewhere.net>
Date2013-12-20 16:08 -0500
SubjectRe: a/v report
Message-ID<l92bl2$kr3$1@dont-email.me>
In reply to#1947
> GS wrote:
>> The a/v reports Win32:evo-gen [susp] as the virus.
>
> I've had a few of those from Avast disk scans recently, usually 
> against perfectly innocuous stuff I've been using for years

Thanks! It's good to know that it's just not me. I have submitted the 
file to Avast for analysis of a 'false positive' and so I'm anxious for 
there reply. Note that TotalVirus scored the file 0/49, which included 
Avast. I keep Avast up to date but I don't know what version TotalVirus 
uses. What's interesting is that multiple scans of its folder report no 
threats!!! Something 'bugy' about that...

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1951 — Re: a/v report

FromWolfgang Enzinger <we_usenet@nurfuerspam.de>
Date2013-12-21 12:36 +0100
SubjectRe: a/v report
Message-ID<160vhju88kgsj.3bpwc9j6ky7v.dlg@40tude.net>
In reply to#1948
Am Fri, 20 Dec 2013 16:08:48 -0500 schrieb GS:

>> GS wrote:
>>> The a/v reports Win32:evo-gen [susp] as the virus.
>>
>> I've had a few of those from Avast disk scans recently, usually 
>> against perfectly innocuous stuff I've been using for years
> 
> Thanks! It's good to know that it's just not me. I have submitted the 
> file to Avast for analysis of a 'false positive' and so I'm anxious for 

I've had all kinds of issues with AV software and my applications in the
past, all of them being confirmed to be false positives so far. Submitting
the file to the AV vendor is the way to go.

> there reply. Note that TotalVirus scored the file 0/49, which included 
> Avast. I keep Avast up to date but I don't know what version TotalVirus 
> uses. What's interesting is that multiple scans of its folder report no 
> threats!!! Something 'bugy' about that...

[susp] as mentioned above obviously means that the AV software thinks it
detected some suspicious behaviour. This is called "heuristic analysis" and
is nothing more than pure speculation. Therefore oftenly this kind of
analysis can be disabled. This may explain the difference between your own
and the VirusTotal result.

The reasons for such a false classification can be astonishing sometimes.
Once I had an application that was marked as Malware by some scanner. I
sent it to that company, they confirmed the false classification and
whitelisted the application's checksum in their signature file. However, I
had to make frequent changes / additions to this app, so every new version
was falsely flagged again. After some time I told them that whitelisting is
no longer a solution. They gave me a hint: I should move my project files
to a different directory. Why? I used to compile that app with debug info,
so the project path was compiled into the EXE. And this path contained the
string "encrypted". This alone was enough to trigger the false positive.
Duh.

Currently I have another issue with another AV vendor. One of my
applications retrieves data (images, XML) from the Intra- / Internet via
HTTP. Now some customers reported that constantly these data are corrupted.
I found out that the data stream was interrupted by a certain scanner
somewhere in the middle of the receiving process. I contacted the AV
vendor, they were actually grateful for my hint and are working on a patch
right now. They were absolutely unaware of that behaviour and the fact that
the data stream interruption isn't even reported in any log file.

Wolfgang

[toc] | [prev] | [next] | [standalone]


#1953 — Re: a/v report

Fromralph <nt_consulting@yahoo.com>
Date2013-12-21 07:12 -0600
SubjectRe: a/v report
Message-ID<h14bb913o54cor50ifa140iqk5sve8c4i5@4ax.com>
In reply to#1951
On Sat, 21 Dec 2013 12:36:42 +0100, Wolfgang Enzinger
<we_usenet@nurfuerspam.de> wrote:

> snipped
>
>The reasons for such a false classification can be astonishing sometimes.
>Once I had an application that was marked as Malware by some scanner. I
>sent it to that company, they confirmed the false classification and
>whitelisted the application's checksum in their signature file. However, I
>had to make frequent changes / additions to this app, so every new version
>was falsely flagged again. After some time I told them that whitelisting is
>no longer a solution. They gave me a hint: I should move my project files
>to a different directory. Why? I used to compile that app with debug info,
>so the project path was compiled into the EXE. And this path contained the
>string "encrypted". This alone was enough to trigger the false positive.
>Duh.
>

Wow. Thanks for sharing that.

I've often wondered if certain 'words', embedded strings in the data
section, could trigger AV complaints. Then I said to myself - Naw!
They wouldn't do anything like that. It has to be binary. <bg>

>Currently I have another issue with another AV vendor. One of my
>applications retrieves data (images, XML) from the Intra- / Internet via
>HTTP. Now some customers reported that constantly these data are corrupted.
>I found out that the data stream was interrupted by a certain scanner
>somewhere in the middle of the receiving process. I contacted the AV
>vendor, they were actually grateful for my hint and are working on a patch
>right now. They were absolutely unaware of that behaviour and the fact that
>the data stream interruption isn't even reported in any log file.
>

I too have been pleasantly surprised at how quickly and well AV
vendors will work with you on specific problems. Of course you have to
be very specific when you talk to them. Cursing and ranting that it
"doesn't work" doesn't get you very far. <g>

-ralph

[toc] | [prev] | [next] | [standalone]


#1983 — Re: a/v report

FromWolfgang Enzinger <we_usenet@nurfuerspam.de>
Date2013-12-23 23:12 +0100
SubjectRe: a/v report
Message-ID<biahb9la3g8t9jm0u8usa9jkfu7240vplk@4ax.com>
In reply to#1953
ralph <nt_consulting@yahoo.com> wrote:

>I too have been pleasantly surprised at how quickly and well AV
>vendors will work with you on specific problems. Of course you have to
>be very specific when you talk to them. Cursing and ranting that it
>"doesn't work" doesn't get you very far. <g>

Usually being the receiving end of such complaint transmissions makes it easy
to figure that out. ;-)

Wolfgang

[toc] | [prev] | [next] | [standalone]


#1955 — Re: a/v report

FromGS <gs@somewhere.net>
Date2013-12-21 10:54 -0500
SubjectRe: a/v report
Message-ID<l94dju$fv6$1@dont-email.me>
In reply to#1951
Large thanks! I ditto Ralph's remarks.

Interesting about the string "encrypted" because all of the apps being 
blocked contain crypto code because their sole purpose is to validate 
licensing, and store license validation in encrypted files.

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1962 — Re: a/v report

FromObiWan <obiwan@mvps.org>
Date2013-12-22 18:08 +0100
SubjectRe: a/v report
Message-ID<20131222180801.00006672@albasani.net>
In reply to#1951
 
> Currently I have another issue with another AV vendor. One of my
> applications retrieves data (images, XML) from the Intra- / Internet
> via HTTP. Now some customers reported that constantly these data are
> corrupted. I found out that the data stream was interrupted by a
> certain scanner somewhere in the middle of the receiving process. 

lemme guess... Sophos :) ?


[toc] | [prev] | [next] | [standalone]


#1981 — Re: a/v report

FromWolfgang Enzinger <we_usenet@nurfuerspam.de>
Date2013-12-23 23:11 +0100
SubjectRe: a/v report
Message-ID<q2ahb9th9b7upeoaf907ve3d873ufrmkd8@4ax.com>
In reply to#1962
ObiWan <obiwan@mvps.org> wrote:

> 
>> Currently I have another issue with another AV vendor. One of my
>> applications retrieves data (images, XML) from the Intra- / Internet
>> via HTTP. Now some customers reported that constantly these data are
>> corrupted. I found out that the data stream was interrupted by a
>> certain scanner somewhere in the middle of the receiving process. 
>
>lemme guess... Sophos :) ?

Nope, TrendMicro, in my case.

Wolfgang

[toc] | [prev] | [next] | [standalone]


#1945 — VirusTotal report

FromGS <gs@somewhere.net>
Date2013-12-20 14:34 -0500
SubjectVirusTotal report
Message-ID<l9264d$hkm$1@dont-email.me>
In reply to#1929
VirusTotal reports 0/49, meaning no virus found by 49 a/v apps. 
(Including mine!)

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1964 — Re: VirusTotal report

From"CoderX" <coder@x.com>
Date2013-12-22 12:59 -0500
SubjectRe: VirusTotal report
Message-ID<l9799a$558$1@dont-email.me>
In reply to#1945
Dude, seriously?  File under 'who gives a fuck' and stop posting OT shit. 
Or find another forum, as pertains to VB, this does not.


"GS" <gs@somewhere.net> wrote in message news:l9264d$hkm$1@dont-email.me...
> VirusTotal reports 0/49, meaning no virus found by 49 a/v apps. (Including 
> mine!)
>
> -- 
> Garry
>
> Free usenet access at http://www.eternal-september.org
> Classic VB Users Regroup!
>  comp.lang.basic.visual.misc
>  microsoft.public.vb.general.discussion
>
>
>
> ---
> This email is free from viruses and malware because avast! Antivirus 
> protection is active.
> http://www.avast.com
> 

[toc] | [prev] | [next] | [standalone]


#1965 — Re: VirusTotal report

FromTony Toews <ttoews@telusplanet.net>
Date2013-12-22 12:52 -0700
SubjectRe: VirusTotal report
Message-ID<glgeb9t27il482pdsqmp0o6bjt3abgpmn0@4ax.com>
In reply to#1964
On Sun, 22 Dec 2013 12:59:04 -0500, "CoderX" <coder@x.com> wrote:
  
>Dude, seriously?  File under 'who gives a fuck' and stop posting OT shit. 
>Or find another forum, as pertains to VB, this does not.

From the subject of his original posting "After Install/Run antivirus
software classifies my EXEs as 'suspicious'"  How is that off topic?
Assuming his exe is a VB6 exe.

Tony

[toc] | [prev] | [next] | [standalone]


#1966 — Re: VirusTotal report

FromGS <gs@somewhere.net>
Date2013-12-22 19:51 -0500
SubjectRe: VirusTotal report
Message-ID<l981do$k6h$1@dont-email.me>
In reply to#1965
> On Sun, 22 Dec 2013 12:59:04 -0500, "CoderX" <coder@x.com> wrote:
>   
>> Dude, seriously?  File under 'who gives a fuck' and stop posting OT 
>> shit.  Or find another forum, as pertains to VB, this does not.
>
> From the subject of his original posting "After Install/Run antivirus
> software classifies my EXEs as 'suspicious'"  How is that off topic?
> Assuming his exe is a VB6 exe.
>
> Tony

Added CoderX to "Do NOT respond to" List!<g>

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1979 — Re: VirusTotal report

From"CoderX" <coder@x.com>
Date2013-12-23 15:57 -0500
SubjectRe: VirusTotal report
Message-ID<l9a83o$tos$1@dont-email.me>
In reply to#1966
"GS" <gs@somewhere.net> wrote in message news:l981do$k6h$1@dont-email.me...
> Added CoderX to "Do NOT respond to" List!<g>

OH NOES!  Whatevers will I do?  I'm...I'm, just so broken on the inside now. 
How can I go on?

LOL!

Goofus. 

[toc] | [prev] | [next] | [standalone]


#1980 — Re: VirusTotal report

From"CoderX" <coder@x.com>
Date2013-12-23 15:59 -0500
SubjectRe: VirusTotal report
Message-ID<l9a89r$v8v$1@dont-email.me>
In reply to#1965
"Tony Toews" <ttoews@telusplanet.net> wrote in message 
news:glgeb9t27il482pdsqmp0o6bjt3abgpmn0@4ax.com...
> On Sun, 22 Dec 2013 12:59:04 -0500, "CoderX" <coder@x.com> wrote:
>
>>Dude, seriously?  File under 'who gives a fuck' and stop posting OT shit.
>>Or find another forum, as pertains to VB, this does not.
>
> From the subject of his original posting "After Install/Run antivirus
> software classifies my EXEs as 'suspicious'"  How is that off topic?
> Assuming his exe is a VB6 exe.

It's off topic (now) because it's an AV problem, and posts on reports is 
kinda irrelevent.  On the Inno board, we direct peeps to the AV website and 
have them report it there.  Just sayin'.

I don't suppose we could start a political discourse and at least make it 
interesting? 

[toc] | [prev] | [next] | [standalone]


#1952

From"Abhishek" <abhishek007p@hotmail.com>
Date2013-12-21 17:28 +0530
Message-ID<l93vpf$4dr$1@dont-email.me>
In reply to#1929
It is a false positive, and quite common, you need to report it to the AV 
company to get it resolved. you can also scan you exe using virustotal.com

Possible Reaons for false positive -
* compressing the exe using a exe complressor
* downloading files from internet and opening them without user consent
* using some kind of trial schemes
* working with memory directly

you need to find out the code which is causing the problem, rewrite it or 
remove it. that is the only way forward.

--
Abhishek P
http://vb6zone.blogspot.com



"GS" <gs@somewhere.net> wrote in message news:l90a9j$n0l$1@dont-email.me...
| What does other installed apps have that prevents antivirus software
| from blocking them? I have a problem with being blocked regardless of
| where the app is located. Is there a standard 'flag' that needs
| setting, at design time, or registration action required on install?
|
| -- 
| Garry
|
| Free usenet access at http://www.eternal-september.org
| Classic VB Users Regroup!
|  comp.lang.basic.visual.misc
|  microsoft.public.vb.general.discussion
|
|
|
| ---
| This email is free from viruses and malware because avast! Antivirus 
protection is active.
| http://www.avast.com
| 

[toc] | [prev] | [next] | [standalone]


#1954

From"Mayayana" <mayayana@invalid.nospam>
Date2013-12-21 09:08 -0500
Message-ID<l947d2$di0$1@dont-email.me>
In reply to#1952
| you need to find out the code which is causing the problem, rewrite it or
| remove it. that is the only way forward.
|

   Unfortunately, AV programs are getting bigger
and more aggressive, which probably makes sense
for them. As long as they don't flag programs like
MS Office, Photoshop and AutoCad, the vast majority
of potential customers will only know them for their
success rate, so they don't stand to lose much
with reckless flagging of unknown programs.

    I only know two people using AV. Both are using
Avast, which I set up for them. Avast doesn't seem
to be too bad. But I did run into trouble with it on a
recent program I wrote to get Google streetview/maps/
satellite. Avast, like many other AV programs, has added
everything but the kitchen sink, expanding out into
quasi-firewall activity. Their "web shield" and "network
shield" functions flagged my program as malware because
it's trying to go online, which is considered suspicious.
I don't write to companies like that. It's a losing battle.
I just try to inform potential end-users of the issue.
I wouldn't have even known about the Avast problem if
I hadn't tried to run my software on a friend's machine.
I haven't used AV since about 2000.

   For anyone who distributes software, rewriting it
is not much of a way forward. If you fix a false
positive from your own AV there might easily be 4
more false positives from other vendors that you'll
never hear about.

   It's increasingly becoming a situation where non-
corporate software is simply not welcome, but there's
also the problem of AV software simply being
overproduced. I've been noticing a fairly new bit of
nonsense lately: I can tell which visitors to my website
use Trendmicro AV because whenever they download a
ZIP or EXE, Trendmicro follows a few seconds later,
downloading at least one copy themselves. And they
don't keep track of what they've downloaded. They
seem to be scanning the source in real time. Every time
a file is downloaded, they download it. It doesn't make
any sense at all, since the same file is being downloaded
to the client machine where their AV is presumably running.
Trendmicro seems to be building a sort of Rube Goldberg
database, filled with lots of data about lots of binaries
online -- all of which data is classified outdated in the
instant it's been stored. I'm considering blocking the whole
Trendmicro range via .htaccess.  ...But then what if
Symantec gets the idea? If Trendmicro can be idiotic,
Symantec can surely outdo them. :) 

[toc] | [prev] | [next] | [standalone]


#1956

FromGS <gs@somewhere.net>
Date2013-12-21 10:59 -0500
Message-ID<l94dsq$hit$1@dont-email.me>
In reply to#1954
Well.., not meaning to throw a wrench at you *but* I use Avast and it's 
causing the problem! What burns me is that scanning the file returns 
'No threats found' both on my machine[s] and TotalVirus.

Wolfgang did present some interesting thoughts...

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


#1959

From"Mayayana" <mayayana@invalid.nospam>
Date2013-12-21 14:53 -0500
Message-ID<l94rjt$65n$1@dont-email.me>
In reply to#1956
"GS" <gs@somewhere.net> wrote in message news:l94dsq$hit$1@dont-email.me...
| Well.., not meaning to throw a wrench at you *but* I use Avast and it's
| causing the problem! What burns me is that scanning the file returns
| 'No threats found' both on my machine[s] and TotalVirus.
|

  I wonder if that could be similar to my case. I
didn't get any virus alert. It just blocked me going
online. In fact, as I recall, I think I even set my
EXE as an exemption. But the various "shields"
don't seem to be in sync with the AV part of the
program. 

[toc] | [prev] | [next] | [standalone]


#1960

FromGS <gs@somewhere.net>
Date2013-12-21 16:06 -0500
Message-ID<l94vsk$uvg$1@dont-email.me>
In reply to#1959
> "GS" <gs@somewhere.net> wrote in message 
> news:l94dsq$hit$1@dont-email.me...
>> Well.., not meaning to throw a wrench at you *but* I use Avast and 
>> it's causing the problem! What burns me is that scanning the file 
>> returns 'No threats found' both on my machine[s] and TotalVirus.
>> 
>
>   I wonder if that could be similar to my case. I
> didn't get any virus alert. It just blocked me going
> online. In fact, as I recall, I think I even set my
> EXE as an exemption. But the various "shields"
> don't seem to be in sync with the AV part of the
> program. 

I'm inclined to agree! I submitted the file to Avast and so I'm waiting 
on a reply from them.

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

[toc] | [prev] | [next] | [standalone]


Page 2 of 4 — ← Prev page 1 [2] 3 4  Next page →

Back to top | Article view | comp.lang.basic.visual.misc


csiph-web