PureBasic Forums - English

Hi,

I get a trojan alert since the latest version 6.11 during compiling/start (f5) in Purebasic_Compilation[..].exe named Win64:Evo-gen[Trj] by AVG (or Avast - same Company).

If I'm starting 6.10 there is no Virus-alert.
I'm not sure wether it's a false negative.

Thank's for help!

// Moved from "The PureBasic Editor" to "General Discussion" (Kiffi)

I wanted to write:
I'm not sure wether it's a false positive.

Add the folder where your PB write and execute .EXEs to the exception on your anti-virus program.
False positives are very frequents on PB EXEs, because AV programs are a bull shit

Hi Caronte3D,
this is exactly what I did. But in spite of the folder exception I get always the same trojan alert.
At the moment I'am working better with Version 6.10.

I should use a isolated VM for coding...

That's totally normal for many developers that compile their code into binaries.
Anti viruses are bullshit and annoying as hell. Just uninstall it completely if you know what you are doing. Just keep your system and applications up to date and you should be fine. Everything else are zero day vulnerabilities where even the best anti virusses can not help you with.

NicTheQuick wrote: Tue Jul 16, 2024 11:41 am That's totally normal for many developers that compile their code into binaries.
Anti viruses are bullshit and annoying as hell. Just uninstall it completely if you know what you are doing. Just keep your system and applications up to date and you should be fine. Everything else are zero day vulnerabilities where even the best anti virusses can not help you with.

Agreed, just uninstall your anti-virus and use the stock Windows security. I tend to turn off cloud-delivered protection, but after that I don't get many false positives with it.

Well, except some text files that one time...

The best is to submit this file to AVG so they can fix there wrong detection

NicTheQuick wrote: Tue Jul 16, 2024 11:41 amJust uninstall it completely if you know what you are doing.

That's not a solution, IMO, because your users won't have done that; so you'll get support emails from them and/or bad-mouthing of your app to others. Speaking from direct negative experience here. It's best to keep your AV enabled so at least you'll know what experience your users will get, and so you can pro-actively white-list it with the relevant AV companies before releasing it. Turning off your AV is just burying your head in the sand.

The problem has been solved.
I am already working on a VM with Purebasic.
However, the virus protection of the host computer was also set to scan the VM. As a result, the temporary purebasic exe was deleted in the background. The solution is to disconnect the VM from the host computer access.