Page 1 of 2
Pure Basic.exe is a virus!
Posted: Thu May 11, 2006 12:42 pm
by MikeB
This morning my anti virus program (Avast) updated itself and shortly after I went to run PB (4 Beta 11) and up popped a message saying that Pure Basic.exe is a Trojan Horse. I told it to take no action, but now I can't run PB, I get a message saying I do not have right to access the program! I have emailed Avast telling them what has happened and I am waiting for a reply. I am about to download PB again and re-install to see if that gets me going again, hopefully it won't get instantly blocked.
Has anybody else come across this problem?
Posted: Thu May 11, 2006 12:48 pm
by Tranquil
Confirmed here too.
http://www.purebasic.fr/english/viewtopic.php?t=21372
It has been discussed in the PB IRC-Chat and is reported to avast.
PB is not virus infected.
Posted: Thu May 11, 2006 1:03 pm
by MikeB
Have just been to download again and discovered that V4 is out (a few days ago) so something good has come out of it as I now have the latest version.
I just hope that it does not happen with this version, but since it has now been reported by at least two of us it should be OK. :roll:
Posted: Thu May 11, 2006 1:18 pm
by MikeB
I have now installed the latest version and I am being blocked from running it, I suppose I now have to wait for a reply from Avast as whatever it has done the computer is not letting me have access to Pure Basic.exe. Avast also reported several other files as being viruses during installation, but I ignored it and installed it all. So it's all there but I can't try it.

Posted: Thu May 11, 2006 1:24 pm
by traumatic
Just get rid of Avast.
Posted: Thu May 11, 2006 1:34 pm
by jack
who was it that wrote a keylogger in PB?, it seems he's the cause of our problems.
Posted: Thu May 11, 2006 1:36 pm
by netmaestro
who was it that wrote a keylogger in PB?, it seems he's the cause of our problems.
Good observation, jack. It sounds spot-on to me. That combined with somebody at Avast who doesn't know what they're doing.
Posted: Thu May 11, 2006 2:03 pm
by dracflamloc
More like a dumbass at avast. Use AVG.
Posted: Thu May 11, 2006 2:06 pm
by mskuma
jack wrote:who was it that wrote a keylogger in PB?, it seems he's the cause of our problems.
That doesn't make sense - just because PB might have been used to make a keylogger doesn't mean PB (the compiler) should be flagged as a keylogger (or other virus risk). [edit: I also came across this issue after an Avast update ..

]
Posted: Thu May 11, 2006 2:09 pm
by thefool
I dont see any sense in getting rid of avast. Every scanner does this now and then.. Avast, Norton, kaspersky everything.
Perhaps the reason AVG never gets these is that avg is always updated later than the others?
Posted: Thu May 11, 2006 2:11 pm
by Inf0Byt3
who was it that wrote a keylogger in PB?, it seems he's the cause of our problems.
It was me

.
Just joking, I never released it - I used it just to monitor my syster and it didn't used internet, the logs were saved locally. But I suspect people who built such things in PB

.
[Edit]
False alerts are everywhere. Any modern heuristical AV engine could get wrong. Usually, the AV sees what imports does the exe has and analyses this data. PBCompiler is using functions like SetCurrentDirectory,SetFileAttributesA,SetFilePointer, etc. that could be interpreted as a threat.
Posted: Thu May 11, 2006 2:15 pm
by thefool
Eventually, a keylogger doesnt have to be a bad thing. Good avast warns us of course..
How can we be sure it doesnt contain a keylogger btw?
well i sent an email to avast about that it blocks my work (wich it does...) and asked them to solve this as fast as possible.
Posted: Thu May 11, 2006 2:19 pm
by Inf0Byt3
Even if it would, I wouldn't mind

. But only for the PB-Team to see the logs.
Posted: Thu May 11, 2006 3:30 pm
by Karbon
Somehow Avast has managed to disallow access to all executables associated with PB. Any idea how to restore this?
When I run JaPBE :
---------------------------
D:\PureBasic393\jaPBE\jaPBe.exe
---------------------------
Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.
---------------------------
OK
---------------------------
Ack!
Posted: Thu May 11, 2006 3:32 pm
by thefool
Avast promply responded:
It is false positive and it will be fixed in upcoming VPS update. We
are sorry for any caused inconvenience.
within a few hours after i sent my mail.