Page 1 of 2
AntiVir false virus alert
Posted: Sat Jan 17, 2009 2:33 pm
by PB
When I try to compile the following code, I get a virus alert with Avira AntiVir.
Maybe Fred needs to contact them to fix the problem? Can anyone confirm
that it happens to them with AntiVir?
Code: Select all
f=LoadImage(0,f$)
If f
ivw=ImageWidth(0) : ivh=ImageHeight(0)
If OpenWindow(0,0,0,ivw,ivh,GetFilePart(f$),#PB_Window_ScreenCentered|#PB_Window_SystemMenu)
StickyWindow(0,#True) : ImageGadget(0,0,0,ivw,ivh,f)
Repeat : Until WaitWindowEvent()=#PB_Event_CloseWindow
EndIf
EndIf

Posted: Sat Jan 17, 2009 2:39 pm
by cxAlex
Can't Confirm. No Problems.
Avira AntiVir 8.2.0.337, XP Pro x86, PB 4.3 x86, With/Without Debugger, With/Without UPX.
Posted: Sat Jan 17, 2009 2:44 pm
by Trond
I have alerted them about this already, and they know it's a false positive.
Re: AntiVir false virus alert
Posted: Sat Jan 17, 2009 4:52 pm
by Joakim Christiansen
PB wrote:Maybe Fred needs to contact them to fix the problem?
Happens a lot with me too. But I don't think Fred should always be the one who have to do something about it, we as users can report it to the anti-virus companies as well. I once e-mailed 3-4 companies about a false positive, and actually two of them answered back I think (not bad).
Posted: Sat Jan 17, 2009 4:59 pm
by DarkDragon
Avira Antivir has found 11 false viruses (different tailbite and purebasic versions) on my pc.
Re: AntiVir false virus alert
Posted: Sun Jan 18, 2009 12:08 am
by PB
> we as users can report it to the anti-virus companies as well
Do you just send the temp exe? What do you do?
Re: AntiVir false virus alert
Posted: Sun Jan 18, 2009 9:07 am
by DarkDragon
PB wrote:> we as users can report it to the anti-virus companies as well
Do you just send the temp exe? What do you do?
I write comments on the virus-site (You can click somewhere then you'll get to the virus site of the virus alert you got.). But they don't react on it afaik.
Re: AntiVir false virus alert
Posted: Sun Jan 18, 2009 1:13 pm
by Trond
PB wrote:> we as users can report it to the anti-virus companies as well
Do you just send the temp exe? What do you do?
Send them the exe. They usually have an upload form on their website.
Posted: Sun Jan 25, 2009 4:43 pm
by Marco2007
http://analysis.avira.com/samples/index.php
I did it once, and I got an answer the next day -> next update, everything was okay.
Posted: Mon Jan 26, 2009 3:26 am
by PB
>
http://analysis.avira.com/samples/index.php
Thanks for the link. However, when I create an exe, it doesn't get flagged as
a virus anymore, but it does if I Compile/Run it from the IDE itself! Weird.

Posted: Mon Jan 26, 2009 3:51 am
by Mistrel
A user reported that Avast is giving a false positive on the new Compiler.exe included with PureGDK 1.1 Beta. I've reported this issue to them but have no received a response.
The executable is compiled to a console application, if that helps.
Thanks for the link. However, when I create an exe, it doesn't get flagged as a virus anymore, but it does if I Compile/Run it from the IDE itself! Weird. Shocked
You can save the debug exe by copying it from the temp directory. You can then provide it as evidence in your report.
Posted: Mon Jan 26, 2009 4:02 am
by Kaeru Gaman
I mean, somewhere must be a limit with "include your exe when reporting a false alert"
... hey, when someone wants to create a commercial application or game,
why the heck should he send it for free to the virus jesters?
Imagine Rooks fine and expensive Cash program, do you think he is hot to spread it among the AV companies?
Posted: Mon Jan 26, 2009 5:43 am
by Mistrel
Actually, I just sent the Compiler.exe. It's the same thing that's freely available with the demo.
Posted: Mon Jan 26, 2009 2:40 pm
by Kaeru Gaman
Mistrel wrote:Actually, I just sent the Compiler.exe. It's the same thing that's freely available with the demo.

Posted: Tue Jan 27, 2009 1:09 am
by Mistrel
According to Avast:
Dear Matt,
we apologize for the inconvenience. The problem will be solved with tomorrow's virus definition update.
Thanks