Anti-virus plague

Ironic isn’t it ? Nowaday, anti-virus are becoming more and more intrusives, and ‘thanks’ to heuristic approaches, the false positives raise a lot, while eradication or real virus are less and less common. When was your last real virus detection ? Mine was may be 5-6 years ago. Since then, i got many alerts, but all were just dumbs. Microsoft has made giant progress to counter virus spreading and execution with modern iterations of Windows (see ASLR, DEP, user mode, etc.).

My concern about anti-viruses is the famous heuristic approach which often flag legit PureBasic programs as contamined. I don’t know exactly how works an anti-virus, but I bet it builds a database with some code patterns found in real virus, and if this code pattern is found in an executable it will raise an alert. And here is really the problem: if PureBasic is used to make a trojan or a virus, then chances are high than the code pattern will be actually a purelibrary command, meaning than every other PureBasic program using this command will be flaged as well. It’s really a poor detection mechanism and I can’t understand why anti-virus maker don’t try to find other methods to detect threats. Since several years now, PureBasic programs (and even the official IDE) are regulary flagged as virus with no reasons, and such threads often popup on officials forums. I can imagine the face of a potential customer wanting install the demo version of PureBasic when a big alert saying ‘Warning Trojan.bigvirus.1337’ popup.

So what to do ? Actually a very few things can be done:
– always send false positives to the your anti-virus maker. The more they get, bigger are the chances they will improve their detection routines.
– change your anti-virus. well, some are better than other. If it doesn’t work with PureBasic, you can consider it as a bad one 馃檪

I hope it will change, somewhen. Ha, dreams…

10 thoughts on “Anti-virus plague

  1. TI-994A

    “…if PureBasic is used to make a trojan or a virus, then chances are high than the code pattern will be actually a purelibrary command, meaning than every other PureBasic program using this command will be flaged as well.”

    Hi Fred. If this is true, it’s going to be a real problem because, good or bad, most lay users tend to follow the recommendations of their security apps. One solution may be code signing, although costly, and not foolproof.

  2. J. Baker

    This is one thing I like about Mac. A developer can sign their app. That’s not to say that someone who’s actually making a virus couldn’t purchase a developer license and sign their “virus”. But it may be less likely.

    The best solution is to only run apps from the “Mac App Store”. These apps have been tested and most likely won’t contain a virus. At least I would hope not. Now if Microsoft would do the same, this could help restrain at least most of the false positives.

    The only bad thing with “the best solution” above, is that the app store does reject certain things and doesn’t give a developer full control on how they feel their app should be.

    All aside, I believe their should be some sort of signing technique across the board for all OS, just like their was/is for certified drivers. This doesn’t mean a user couldn’t or shouldn’t run unsigned apps but this would be an option to enable or disable per OS, like on OS X.

  3. diaaannnas

    袪袉小袀袪碌袪褬小袕 袪褢小袃小鈥毿犙懶犘呅犘呅♀剐犫剸 袪禄袪褢小鈥π犅靶♀ 袪袇袪碌 袪卤袪褧袪褢小鈥毿⌒冃⌒ 袪袇袪碌小褤袪覒袪掳小鈥: 袪褦小褤袪袉小鈥剐⌒傂犙斝犘呅♀樞♀毿⌒冃⌒ 袪袇袪碌袪袇袪掳小袀袪褧袪褦袪褧袪褬 袪褢 袪褧袪褩小袕小鈥毿⌒ 袪袇袪碌小袃小鈥樞♀毿⌒冃⌒ 袪袉小袃袪褦袪掳小鈥⌒⌒ 小袃袪褦袪掳袪路袪褦袪掳 袪褬袪褧袪禄袪褧袪覒小鈥犘犅靶犙 小褤小袀袪褧袪褦 袪褦袪褧袪禄小袏 袪袇袪掳小褤袪褦袪掳 袪褢袪褬 袪袇袪碌 袪袉袪褩小袀袪褧袪褦

    http://preparat.xyz/

    袪褧袪卤小袀袪掳袪路袪碌小鈥 袪褦袪掳袪褦 袪褩小袀袪掳袪袉袪褢袪禄小袏袪袇袪褧 袪袇袪掳袪褩袪褢小袃袪褩小鈥毿⌒ 小袀袪碌小鈧犅敌犘呅犙懶犅 袪碌袪覒袪褢袪袇小袃小鈥毿犘喰犅敌犘呅犘呅犙曅犙栃犙 小褤袪碌小袀袪褢袪覒袪褢小鈥毿犅敌犅恍⌒ 袪褧 小袀袪掳小袃袪褩小袀袪碌袪覒袪碌袪禄袪碌袪袇袪褢袪褢 袪覒袪褧小鈥π犙曅犚懶犅 袪褦袪掳袪褦 袪覒袪褢袪袉袪褢袪覒袪碌袪袇袪覒小鈥

    mwetyu

  4. Rogercoism

    Essay Writing Service – EssayErudite.com

    Our [url=https://essayerudite.com]essay writing service[/url] provides a full-scale writing assistance accessible online 24/7.
    Apart from many other writing companies, we are rather picky when forming a professional staff of experts.
    Moreover, we try to make our every customer feel safe and pleased with the service.

    essay writing service

    Essay Writing Service – https://essayerudite.com

  5. StevenImasp

    Write My Paper – EssayErudite.com

    Looking for an expert to [url=https://essayerudite.com/write-my-paper/]write my paper[/url] for you? You are at the right place.
    Providing superior writing service appears to be our main specialization and passion.
    Our website is the best destination for every English-speaking student who calls for assistance when handling his or her daily academic tasks.

    write my paper

    Write My Paper – https://essayerudite.com/write-my-paper/

  6. Haroldlok

    Write My Essay For Me – EssayErudite.com

    Can You [url=https://essayerudite.com/write-essay-for-me/]Write Essay For Me[/url] ? How many times do students worldwide ask this question without finding an answer?
    We’d rather not check the official statistics. At the same time, essays appear to be probably among the most popular academic assignments.
    Students from various education establishments need to complete them constantly. If you are among those lucky ones, feel free to contact our customer service department and opt for an essay writing help.

    Write Essay For Me

    Write My Essay For Me – https://essayerudite.com/write-essay-for-me/

  7. WilliamWic

    Buy Essay – EssayErudite.com

    Where to [url=https://essayerudite.com/buy-essay/]buy essay[/url] online ? Our experienced writers can boast higher degrees in addition to exceptional writing skills.
    You now have a great chance to buy essay papers online with only a couple of clicks.

    Buy Essay

    Buy Essay Online – https://essayerudite.com/buy-essay/

  8. JamesGen

    Best Essay Writing Service – EssayErudite.com

    Looking for the [url=https://essayerudite.com/best-essay-writing-service/]best essay writing service[/url] can turn into a pain in the neck especially if you are not an experienced essay buyer.
    EssayErudite.com is well known among students from the USA, UK, Canada and Australia.
    We provide a superior writing assistance and handle all types of academic papers ranging from dissertations and thesis statements to reviews and coursework.
    Whatever the challenge is, you can always count on us.

    Best Essay Writing Service – https://essayerudite.com/best-essay-writing-service/

  9. ZlobCulse

    If you鈥檙e interested in winning millions, then I鈥檓 here to help!
    At [url=skyliteboom.com]Casino[/url] you can play over 450 world-class games and I鈥檓 giving you an exclusive Welcome Bonus to get you stuck into winning.
    Use it today to increase your chances of hitting our jackpots.
    All you have to do is [url=skyliteboom.com]sign up today[/url] and watch the rewards come rolling in.
    skyliteboom.com
    [url=skyliteboom.com]Prepare to hit the big time[/url]
    [url=skyliteboom.com]Hacer giros para ganar millones[/url]
    [url=skyliteboom.com]Holen Sie sich spinnen, um Millionen zu gewinnen[/url]
    [IMG]http://i63.tinypic.com/ofdmds.jpg[/IMG]

Leave a Reply