PB and anti virus problems since years ...

Everything else that doesn't fall into one of the other PB categories.
marc_256
Addict
Addict
Posts: 835
Joined: Thu May 06, 2010 10:16 am
Location: Belgium
Contact:

PB and anti virus problems since years ...

Post by marc_256 »

Hi,

The settings of my NOD32 anti virus, if virus detection, "delete and store in quarantine".

Almost every time I try to create an .exe from PB sources,
NOD32 tells me there is a virus detection and stores my exe in quarantine as set in the NOD setup.
If I send it to some people to test my software, they do not want to use/test my program for that reason.
And I understand them very well.

This is very annoying me more and more... :evil:

So, what can I do for this ?
There must be a reason for that ??

Thanks,
- every professional was once an amateur - greetings from Pajottenland - Belgium -
PS: sorry for my english I speak flemish ...
PB
PureBasic Expert
PureBasic Expert
Posts: 7581
Joined: Fri Apr 25, 2003 5:24 pm

Re: PB and anti virus problems since years ...

Post by PB »

This has been discussed so many times before. Please search the forum.
I compile using 5.31 (x86) on Win 7 Ultimate (64-bit).
"PureBasic won't be object oriented, period" - Fred.
marc_256
Addict
Addict
Posts: 835
Joined: Thu May 06, 2010 10:16 am
Location: Belgium
Contact:

Re: PB and anti virus problems since years ...

Post by marc_256 »

Oeps, sorry, :oops:
- every professional was once an amateur - greetings from Pajottenland - Belgium -
PS: sorry for my english I speak flemish ...
PB
PureBasic Expert
PureBasic Expert
Posts: 7581
Joined: Fri Apr 25, 2003 5:24 pm

Re: PB and anti virus problems since years ...

Post by PB »

It's okay. Just remember that just about everything has been
discussed in these forums before, so a search is always the
best choice before posting a new thread.
I compile using 5.31 (x86) on Win 7 Ultimate (64-bit).
"PureBasic won't be object oriented, period" - Fred.
User avatar
Shardik
Addict
Addict
Posts: 2058
Joined: Thu Apr 21, 2005 2:38 pm
Location: Germany

Re: PB and anti virus problems since years ...

Post by Shardik »

You should also take a look into Fred's blog posting:
Anti-virus plague
marc_256
Addict
Addict
Posts: 835
Joined: Thu May 06, 2010 10:16 am
Location: Belgium
Contact:

Re: PB and anti virus problems since years ...

Post by marc_256 »

@Shardik

Yep, thank you.

marc
- every professional was once an amateur - greetings from Pajottenland - Belgium -
PS: sorry for my english I speak flemish ...
IdeasVacuum
Always Here
Always Here
Posts: 6426
Joined: Fri Oct 23, 2009 2:33 am
Location: Wales, UK
Contact:

Re: PB and anti virus problems since years ...

Post by IdeasVacuum »

I used to like NOD32 but it seems to get way too many false-positives now. Give AVAST Free a try, I'm using it for WinXP now and it's been impressive. Yes it does have false-positives too, but not so many and everything you know to be safe (PB) can be added to the ignore list.
IdeasVacuum
If it sounds simple, you have not grasped the complexity.
User avatar
A.D.
User
User
Posts: 98
Joined: Tue Oct 06, 2009 9:11 pm

Re: PB and anti virus problems since years ...

Post by A.D. »

Well, i'd like to know why does fred's code cause false alarms whilst other compilers maybe don't? The anti-malware creators don't seem to understand our complains about the false alarms with purebasic over years! Dear Fred, can't you change the code parts of purebasic which cause the false alarms? At least i would like to know which parts of your wonderful language are affected ?

Greets
A.D.

:wink: :wink: :wink:


I found this thread here in the forum, very good to know a bit more about this problem : http://www.purebasic.fr/english/viewtop ... irus+false
I'm gonna disable my heuristic scanning now for real...maybe this feature should be disabled by default in the av-softwares.
Repeat
PureBasic
ForEver
User avatar
luis
Addict
Addict
Posts: 3893
Joined: Wed Aug 31, 2005 11:09 pm
Location: Italy

Re: PB and anti virus problems since years ...

Post by luis »

This is becoming worst than the OOP saga.
A.D. wrote: Dear Fred, can't you change the code parts of purebasic which cause the false alarms? At least i would like to know which parts of your wonderful language are affected ?
I don't see why Fred should answer for something wrong yelled by a stupid antivirus or worse yet change something in his code just to make an antivirus happy. Not only this would be wrong, it would also be temporary, do you realize that ?

What I find amazing is that a problem to be fixed does not exist to start with.

It is wrongly (this is the keyword, WRONGLY) reported like a problem by a software with a staggering high failure rate written by people with no clue or no real interest beyond an economic one, explicitly for people bred to accept it like a real problem and willing to pressure other people who has nothing to do with it in "doing something about it".

That's pretty absurd. Write to the people making this crap and ask them to explain to their ignorant users how their software work, on their own websites and in the manual, what its limitation are, and pretend from them to use the appropriate wording when reporting something.

If I start to describe you like a "psychotic serial killer, thief and bank robber" every time I meet a person you know, does it sound logical to you:

1) to go to each of these persons and reassure them, explaining why you are such a good human being and asking them to trust you and asking me (politely) to kindly take that back at my earliest convenience

2) to ignore me and let the persons who does believe what I told them, without ANY KIND OF PROOF, to go to hell

3) to hit me in the face for spreading unsubstantiated lies and let the persons who does believe what I told them, without ANY KIND OF PROOF, to go to hell

4) to take legal action against me for slander and let the persons who does believe what I told them, without ANY KIND OF PROOF, to go to hell

?

To me just 2, 3 and 4 sounds good. And yet the majority of people seems to find perfectly reasonable the first choice.

And to repeat this process indefinitely with different actors.


An AV it's just a tool. It was a fairly precise tool. Now it's generally a sloppy tool. Let's treat it appropriately and investigate its claims without believe in it blindly.

Also real viruses are practically extincted today, malware distributed one to one, directly without the need of an innocent infected host and without a previous history are the real problem.
A.D. wrote:I'm gonna disable my heuristic scanning now for real...maybe this feature should be disabled by default in the av-softwares.
A classical rigid fingerprint based AV is useless against this, so disabling the heuristic part of an AV it's like turning it off without the advantages of not having it on your system.
Last edited by luis on Fri Jun 13, 2014 11:43 am, edited 1 time in total.
"Have you tried turning it off and on again ?"
A little PureBasic review
coco2
Enthusiast
Enthusiast
Posts: 461
Joined: Mon Nov 25, 2013 5:38 am
Location: Australia

Re: PB and anti virus problems since years ...

Post by coco2 »

Did you report the "possible" false positive to Eset?
Report a blocked website or false positive
Please create and send an email with the following information:
....
At this link here:

http://kb.eset.com/esetkb/index?page=content&id=SOLN141
Little John
Addict
Addict
Posts: 4775
Joined: Thu Jun 07, 2007 3:25 pm
Location: Berlin, Germany

Re: PB and anti virus problems since years ...

Post by Little John »

A.D. wrote:Well, i'd like to know why does fred's code cause false alarms whilst other compilers maybe don't? The anti-malware creators don't seem to understand our complains about the false alarms with purebasic over years! Dear Fred, can't you change the code parts of purebasic which cause the false alarms?
This problem is not caused by Fred, and Fred can not solve it.
PB wrote:This has been discussed so many times before. Please search the forum.
Shardik wrote:You should also take a look into Fred's blog posting:
Anti-virus plague
Thorium
Addict
Addict
Posts: 1305
Joined: Sat Aug 15, 2009 6:59 pm

Re: PB and anti virus problems since years ...

Post by Thorium »

luis wrote:
A.D. wrote:I'm gonna disable my heuristic scanning now for real...maybe this feature should be disabled by default in the av-softwares.
A classical rigid fingerprint based AV is useless against this, so disabling the heuristic part of an AV it's like turning it off without the advantages of not having it on your system.
I think it's the opposite. Signature scan is the only thing the AV does for you and it works.
The point of heuristics is to detect unknown maleware. I never saw a heuristic scan detect a real maleware. Thats because maleware authors test there code against heuristic scanners, making them useless. Only if the maleware is known and the virus scanner is updated the heuristic might work on it, but in this case it's allready included in the signature database, again making heuristic obsolete.
PB
PureBasic Expert
PureBasic Expert
Posts: 7581
Joined: Fri Apr 25, 2003 5:24 pm

Re: PB and anti virus problems since years ...

Post by PB »

> why does fred's code cause false alarms whilst other compilers maybe don't?

Because PureBasic is the perfect language for malware authors.
Small, standalone executables... no need to install a runtime, etc.
You just can't write an effective virus in Visual Basic.NET at all,
because it won't even run if the .NET runtime isn't installed.

> Fred, can't you change the code parts of purebasic which cause the false alarms?

No, he can't, because you're asking him to rewrite the core language.

See my post here where you can avoid false alarms yourself:

http://www.purebasic.fr/english/viewtop ... 77#p431877

It helped me.
I compile using 5.31 (x86) on Win 7 Ultimate (64-bit).
"PureBasic won't be object oriented, period" - Fred.
Post Reply