Pure Basic.exe is a virus!

MikeB · Post by **MikeB** » Thu May 11, 2006 12:42 pm

This morning my anti virus program (Avast) updated itself and shortly after I went to run PB (4 Beta 11) and up popped a message saying that Pure Basic.exe is a Trojan Horse. I told it to take no action, but now I can't run PB, I get a message saying I do not have right to access the program! I have emailed Avast telling them what has happened and I am waiting for a reply. I am about to download PB again and re-install to see if that gets me going again, hopefully it won't get instantly blocked.

Has anybody else come across this problem?

Tranquil · Post by **Tranquil** » Thu May 11, 2006 12:48 pm

Confirmed here too.

http://www.purebasic.fr/english/viewtopic.php?t=21372

It has been discussed in the PB IRC-Chat and is reported to avast.

PB is not virus infected.

MikeB · Post by **MikeB** » Thu May 11, 2006 1:03 pm

Have just been to download again and discovered that V4 is out (a few days ago) so something good has come out of it as I now have the latest version.

I just hope that it does not happen with this version, but since it has now been reported by at least two of us it should be OK. :roll:

MikeB · Post by **MikeB** » Thu May 11, 2006 1:18 pm

I have now installed the latest version and I am being blocked from running it, I suppose I now have to wait for a reply from Avast as whatever it has done the computer is not letting me have access to Pure Basic.exe. Avast also reported several other files as being viruses during installation, but I ignored it and installed it all. So it's all there but I can't try it.

traumatic · Post by **traumatic** » Thu May 11, 2006 1:24 pm

Just get rid of Avast.

jack · Post by **jack** » Thu May 11, 2006 1:34 pm

who was it that wrote a keylogger in PB?, it seems he's the cause of our problems.

netmaestro · Post by **netmaestro** » Thu May 11, 2006 1:36 pm

who was it that wrote a keylogger in PB?, it seems he's the cause of our problems.

Good observation, jack. It sounds spot-on to me. That combined with somebody at Avast who doesn't know what they're doing.

dracflamloc · Post by **dracflamloc** » Thu May 11, 2006 2:03 pm

More like a dumbass at avast. Use AVG.

mskuma · Post by **mskuma** » Thu May 11, 2006 2:06 pm

jack wrote:who was it that wrote a keylogger in PB?, it seems he's the cause of our problems.

That doesn't make sense - just because PB might have been used to make a keylogger doesn't mean PB (the compiler) should be flagged as a keylogger (or other virus risk). [edit: I also came across this issue after an Avast update ..

]

thefool · Post by **thefool** » Thu May 11, 2006 2:09 pm

I dont see any sense in getting rid of avast. Every scanner does this now and then.. Avast, Norton, kaspersky everything.
Perhaps the reason AVG never gets these is that avg is always updated later than the others?

Inf0Byt3 · Post by **Inf0Byt3** » Thu May 11, 2006 2:11 pm

who was it that wrote a keylogger in PB?, it seems he's the cause of our problems.

It was me

.

Just joking, I never released it - I used it just to monitor my syster and it didn't used internet, the logs were saved locally. But I suspect people who built such things in PB

.

[Edit]
False alerts are everywhere. Any modern heuristical AV engine could get wrong. Usually, the AV sees what imports does the exe has and analyses this data. PBCompiler is using functions like SetCurrentDirectory,SetFileAttributesA,SetFilePointer, etc. that could be interpreted as a threat.

thefool · Post by **thefool** » Thu May 11, 2006 2:15 pm

Eventually, a keylogger doesnt have to be a bad thing. Good avast warns us of course..
How can we be sure it doesnt contain a keylogger btw?

well i sent an email to avast about that it blocks my work (wich it does...) and asked them to solve this as fast as possible.

Inf0Byt3 · Post by **Inf0Byt3** » Thu May 11, 2006 2:19 pm

Even if it would, I wouldn't mind

. But only for the PB-Team to see the logs.

Karbon · Post by **Karbon** » Thu May 11, 2006 3:30 pm

Somehow Avast has managed to disallow access to all executables associated with PB. Any idea how to restore this?

When I run JaPBE :

---------------------------
D:\PureBasic393\jaPBE\jaPBe.exe
---------------------------
Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.
---------------------------
OK
---------------------------

Ack!

thefool · Post by **thefool** » Thu May 11, 2006 3:32 pm

Avast promply responded:

It is false positive and it will be fixed in upcoming VPS update. We
are sorry for any caused inconvenience.

within a few hours after i sent my mail.