false alarms Avast... (yeah i know it is not PB problem!)

Windows specific forum
Mohawk70
Enthusiast
Enthusiast
Posts: 404
Joined: Thu May 11, 2006 1:04 am
Location: Florida, USA

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by Mohawk70 »

My point was it is a valid exe that does nothing but end immediately and it is still flagged by some AV tools.
HP Z800 Workstation
CPU : Dual Xeon 5690 3.46GHz
RAM : 96GB RAM ( 8GB x 12 )
PSU : 1100W
GPU : NVIDIA RTX 3050 8GB
STORAGE : 9TB
(4) 2TB Seagate IronWolf Pro HDD
(1) 1TB Samsung 870 EVO SSD
User avatar
Azul
Enthusiast
Enthusiast
Posts: 109
Joined: Fri Dec 29, 2006 9:50 pm
Location: Finland

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by Azul »

Good news,

I got reply from avast support that they have changed detection definitions. I tested compiling and at least now detection of empty debugger enabled compilation does not flag into false positive.

update: sent them another false positive to check. it seems debugger enabled binaries gets flagged easier.

Code: Select all

; Hello, World!
MachineCode
Addict
Addict
Posts: 1482
Joined: Tue Feb 22, 2011 1:16 pm

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by MachineCode »

Mohawk70 wrote:My point was it is a valid exe that does nothing but end immediately and it is still flagged by some AV tools.
That's the trouble... it makes the exe look suspicious because it does nothing. Still, I know what you mean.
Microsoft Visual Basic only lasted 7 short years: 1991 to 1998.
PureBasic: Born in 1998 and still going strong to this very day!
User avatar
Azul
Enthusiast
Enthusiast
Posts: 109
Joined: Fri Dec 29, 2006 9:50 pm
Location: Finland

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by Azul »

I guess we would need a program that compiles with every purebasic library (not necessarily fully utilize them) so it can be tested against AV-software.

Code: Select all

; Hello, World!
MachineCode
Addict
Addict
Posts: 1482
Joined: Tue Feb 22, 2011 1:16 pm

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by MachineCode »

I just test against Jottie and VirusTotal before I release, and I only release when both of those show 100% clean with all their scanners.
Microsoft Visual Basic only lasted 7 short years: 1991 to 1998.
PureBasic: Born in 1998 and still going strong to this very day!
IdeasVacuum
Always Here
Always Here
Posts: 6426
Joined: Fri Oct 23, 2009 2:33 am
Location: Wales, UK
Contact:

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by IdeasVacuum »

I guess we would need a program that compiles with every purebasic library (not necessarily fully utilize them) so it can be tested against AV-software.
That is something Fred/Freak could do for every release, make an exe and send it off to all the major AV developers.
IdeasVacuum
If it sounds simple, you have not grasped the complexity.
Thade
Enthusiast
Enthusiast
Posts: 266
Joined: Sun Aug 03, 2003 12:06 am
Location: Austria

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by Thade »

Azul wrote:Good news,

I got reply from avast support that they have changed detection definitions. I tested compiling and at least now detection of empty debugger enabled compilation does not flag into false positive.

update: sent them another false positive to check. it seems debugger enabled binaries gets flagged easier.
I thought the same (Good news) after I sent some of my PB compiled programs to Avast! And got the message that it should all be fixed with the next update ... that was 1 week ago.
Actually I had an at least 10 mails conversation with one of their specialists.

But I noticed no change so far. Some PB programs just disappear in the container - without warning - although all settings are set as the Avast Guy explained. It should actually only give a warning in case - but it doesn't - it still moves the program to the container and kills the Icon from the Desktop.

I am about to leave Avast (only 12 days to go before I have to pay the fee for 7 PCs again)

Anyway that does not solve the problem.

RGR
--------------
Yes, its an Irish Wolfhound.
Height: 107 cm; Weight: 88 kg
sartic
Enthusiast
Enthusiast
Posts: 143
Joined: Thu Aug 26, 2010 8:26 am

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by sartic »

I am using now Immunet. 'till now no single problem with false positive.
Yesterday even my web page has false alarm by Avast. My users are stumbled how my web has trojan :)
Registered user of PB (on Linux Mint 21.1 & Win 10 64bit)
User avatar
DoubleDutch
Addict
Addict
Posts: 3220
Joined: Thu Aug 07, 2003 7:01 pm
Location: United Kingdom
Contact:

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by DoubleDutch »

Quick thought: Is it libel to say that a program is a virus when it is not?
https://deluxepixel.com <- My Business website
https://reportcomplete.com <- School end of term reports system
MachineCode
Addict
Addict
Posts: 1482
Joined: Tue Feb 22, 2011 1:16 pm

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by MachineCode »

DoubleDutch wrote:Quick thought: Is it libel to say that a program is a virus when it is not?
Yes. Just like when Microsoft says your product is not commonly downloaded. How do they know? They only track IE downloads.
Microsoft Visual Basic only lasted 7 short years: 1991 to 1998.
PureBasic: Born in 1998 and still going strong to this very day!
User avatar
DoubleDutch
Addict
Addict
Posts: 3220
Joined: Thu Aug 07, 2003 7:01 pm
Location: United Kingdom
Contact:

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by DoubleDutch »

So if they repeatedly 'libel' you then in theory you should be able to get a court order against them. (In theory again) if they do it again then they will be in contempt of court?

http://www.jetlaw.org/wp-content/journa ... _final.pdf
https://deluxepixel.com <- My Business website
https://reportcomplete.com <- School end of term reports system
sartic
Enthusiast
Enthusiast
Posts: 143
Joined: Thu Aug 26, 2010 8:26 am

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by sartic »

immunet failed me this month. false positives are back.
i give up on av on win at least for real-time protection.
using now clamav and mbam free for weekly scan.
Registered user of PB (on Linux Mint 21.1 & Win 10 64bit)
PB
PureBasic Expert
PureBasic Expert
Posts: 7581
Joined: Fri Apr 25, 2003 5:24 pm

Re: false alarms Avast... (yeah i know it is not PB problem!

Post by PB »

> http://www.jetlaw.org/wp-content/journa ... _final.pdf

Good link; thanks! :) I've always said that false positives are libel.
I compile using 5.31 (x86) on Win 7 Ultimate (64-bit).
"PureBasic won't be object oriented, period" - Fred.
Post Reply