Page 1 of 1

PB and anti virus problems since years ...

Posted: Sun May 11, 2014 7:49 am
by marc_256
Hi,

The settings of my NOD32 anti virus, if virus detection, "delete and store in quarantine".

Almost every time I try to create an .exe from PB sources,
NOD32 tells me there is a virus detection and stores my exe in quarantine as set in the NOD setup.
If I send it to some people to test my software, they do not want to use/test my program for that reason.
And I understand them very well.

This is very annoying me more and more... :evil:

So, what can I do for this ?
There must be a reason for that ??

Thanks,

Re: PB and anti virus problems since years ...

Posted: Sun May 11, 2014 8:54 am
by PB
This has been discussed so many times before. Please search the forum.

Re: PB and anti virus problems since years ...

Posted: Sun May 11, 2014 9:01 am
by marc_256
Oeps, sorry, :oops:

Re: PB and anti virus problems since years ...

Posted: Sun May 11, 2014 9:10 am
by PB
It's okay. Just remember that just about everything has been
discussed in these forums before, so a search is always the
best choice before posting a new thread.

Re: PB and anti virus problems since years ...

Posted: Sun May 11, 2014 12:39 pm
by Shardik
You should also take a look into Fred's blog posting:
Anti-virus plague

Re: PB and anti virus problems since years ...

Posted: Sun May 11, 2014 7:43 pm
by marc_256
@Shardik

Yep, thank you.

marc

Re: PB and anti virus problems since years ...

Posted: Sun May 11, 2014 10:28 pm
by IdeasVacuum
I used to like NOD32 but it seems to get way too many false-positives now. Give AVAST Free a try, I'm using it for WinXP now and it's been impressive. Yes it does have false-positives too, but not so many and everything you know to be safe (PB) can be added to the ignore list.

Re: PB and anti virus problems since years ...

Posted: Thu Jun 12, 2014 11:47 pm
by A.D.
Well, i'd like to know why does fred's code cause false alarms whilst other compilers maybe don't? The anti-malware creators don't seem to understand our complains about the false alarms with purebasic over years! Dear Fred, can't you change the code parts of purebasic which cause the false alarms? At least i would like to know which parts of your wonderful language are affected ?

Greets
A.D.

:wink: :wink: :wink:


I found this thread here in the forum, very good to know a bit more about this problem : http://www.purebasic.fr/english/viewtop ... irus+false
I'm gonna disable my heuristic scanning now for real...maybe this feature should be disabled by default in the av-softwares.

Re: PB and anti virus problems since years ...

Posted: Fri Jun 13, 2014 12:34 am
by luis
This is becoming worst than the OOP saga.
A.D. wrote: Dear Fred, can't you change the code parts of purebasic which cause the false alarms? At least i would like to know which parts of your wonderful language are affected ?
I don't see why Fred should answer for something wrong yelled by a stupid antivirus or worse yet change something in his code just to make an antivirus happy. Not only this would be wrong, it would also be temporary, do you realize that ?

What I find amazing is that a problem to be fixed does not exist to start with.

It is wrongly (this is the keyword, WRONGLY) reported like a problem by a software with a staggering high failure rate written by people with no clue or no real interest beyond an economic one, explicitly for people bred to accept it like a real problem and willing to pressure other people who has nothing to do with it in "doing something about it".

That's pretty absurd. Write to the people making this crap and ask them to explain to their ignorant users how their software work, on their own websites and in the manual, what its limitation are, and pretend from them to use the appropriate wording when reporting something.

If I start to describe you like a "psychotic serial killer, thief and bank robber" every time I meet a person you know, does it sound logical to you:

1) to go to each of these persons and reassure them, explaining why you are such a good human being and asking them to trust you and asking me (politely) to kindly take that back at my earliest convenience

2) to ignore me and let the persons who does believe what I told them, without ANY KIND OF PROOF, to go to hell

3) to hit me in the face for spreading unsubstantiated lies and let the persons who does believe what I told them, without ANY KIND OF PROOF, to go to hell

4) to take legal action against me for slander and let the persons who does believe what I told them, without ANY KIND OF PROOF, to go to hell

?

To me just 2, 3 and 4 sounds good. And yet the majority of people seems to find perfectly reasonable the first choice.

And to repeat this process indefinitely with different actors.


An AV it's just a tool. It was a fairly precise tool. Now it's generally a sloppy tool. Let's treat it appropriately and investigate its claims without believe in it blindly.

Also real viruses are practically extincted today, malware distributed one to one, directly without the need of an innocent infected host and without a previous history are the real problem.
A.D. wrote:I'm gonna disable my heuristic scanning now for real...maybe this feature should be disabled by default in the av-softwares.
A classical rigid fingerprint based AV is useless against this, so disabling the heuristic part of an AV it's like turning it off without the advantages of not having it on your system.

Re: PB and anti virus problems since years ...

Posted: Fri Jun 13, 2014 5:41 am
by coco2
Did you report the "possible" false positive to Eset?
Report a blocked website or false positive
Please create and send an email with the following information:
....
At this link here:

http://kb.eset.com/esetkb/index?page=content&id=SOLN141

Re: PB and anti virus problems since years ...

Posted: Fri Jun 13, 2014 6:14 am
by Little John
A.D. wrote:Well, i'd like to know why does fred's code cause false alarms whilst other compilers maybe don't? The anti-malware creators don't seem to understand our complains about the false alarms with purebasic over years! Dear Fred, can't you change the code parts of purebasic which cause the false alarms?
This problem is not caused by Fred, and Fred can not solve it.
PB wrote:This has been discussed so many times before. Please search the forum.
Shardik wrote:You should also take a look into Fred's blog posting:
Anti-virus plague

Re: PB and anti virus problems since years ...

Posted: Thu Jul 10, 2014 2:14 am
by Thorium
luis wrote:
A.D. wrote:I'm gonna disable my heuristic scanning now for real...maybe this feature should be disabled by default in the av-softwares.
A classical rigid fingerprint based AV is useless against this, so disabling the heuristic part of an AV it's like turning it off without the advantages of not having it on your system.
I think it's the opposite. Signature scan is the only thing the AV does for you and it works.
The point of heuristics is to detect unknown maleware. I never saw a heuristic scan detect a real maleware. Thats because maleware authors test there code against heuristic scanners, making them useless. Only if the maleware is known and the virus scanner is updated the heuristic might work on it, but in this case it's allready included in the signature database, again making heuristic obsolete.

Re: PB and anti virus problems since years ...

Posted: Thu Jul 10, 2014 9:07 am
by PB
> why does fred's code cause false alarms whilst other compilers maybe don't?

Because PureBasic is the perfect language for malware authors.
Small, standalone executables... no need to install a runtime, etc.
You just can't write an effective virus in Visual Basic.NET at all,
because it won't even run if the .NET runtime isn't installed.

> Fred, can't you change the code parts of purebasic which cause the false alarms?

No, he can't, because you're asking him to rewrite the core language.

See my post here where you can avoid false alarms yourself:

http://www.purebasic.fr/english/viewtop ... 77#p431877

It helped me.