Announcement

Collapse
No announcement yet.

AVG False Positive

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • AVG False Positive

    The latest update of AVG antivirus is checking every program compiled with PB.
    It can allow directories to be exempted, however.
    The world is strange and wonderful.*
    I reserve the right to be horrifically wrong.
    Please maintain a safe following distance.
    *wonderful sold separately.

  • #2
    Does AVG detects that PB compiled exe and dll are virus or malware ?
    Probably you need to inform Drake Software about it and get them to advise AVG that these are not viruses.
    This can lead to damaging implications to our progs. Thanxx

    Comment


    • #3
      Have you submitted programs to http://virustotal.com
      https://virustotal.com/en/file/d4b96...is/1489163480/
      Code:
      FUNCTION PBMAIN () AS LONG
       ? "This ia a test"
      END FUNCTION
      I never read the about option on VirusTotal until today.
      They are a subsidiary of Google and results are shared by anti-virus companies.
      https://www.virustotal.com/en/about/
      Last edited by Mike Doty; 10 Mar 2017, 11:00 AM.

      Comment


      • #4
        Make sure the EXE files have BOTH a manifest and version control block. Many AV scanner see that lack of these as suspicious software.
        hutch at movsd dot com
        The MASM Forum

        www.masm32.com

        Comment


        • #5
          Greetings

          I use AVAST, which has an option to allow the user to exempt certain folders from being scanned. When compiling, I set up #COMPILE this way

          #COMPILE EXE "..\EXEs\MyProgram.exe"

          This puts all compiled PBCC EXEs into the folder C:\PBCC\EXEs and AVAST is adjusted to ignore that particular folder

          Thanx-A-Lot, Frank

          Comment


          • #6
            Originally posted by Chris Chancellor View Post
            Does AVG detects that PB compiled exe and dll are virus or malware ?
            Probably you need to inform Drake Software about it and get them to advise AVG that these are not viruses.
            This can lead to damaging implications to our progs. Thanxx
            I just pops up a notice that it is scanning them.
            After it scans them once, it doesn't bother again.
            Of course, when I compile and run using Ctrl/E, it scans every time.
            That is why I told it to leave that folder alone from now on.
            It is a nuisance. But it does not report them as malicious or stop them
            from running. It scans them once and then ignores them.
            Click image for larger version

Name:	avgscan.png
Views:	1
Size:	75.7 KB
ID:	759116
            The world is strange and wonderful.*
            I reserve the right to be horrifically wrong.
            Please maintain a safe following distance.
            *wonderful sold separately.

            Comment


            • #7
              Kaspersky does the same ... for any new program, not just the ones I compile using PB. It also scans my .NET executables, for example. I consider this to be a sign of a good AV product. Once it has scanned the executable, further starts are fine, unless I change something and recompile, ofc.

              Comment


              • #8
                I find that if I put this at the top of my program, I don't get false positives:

                %appmajor = 1
                %appminor = 0
                %apprevision = 0
                %appbuild = &H0000??
                '$appversion = "1.0.0.0"
                $appname = "PowerBASIC Application"
                $appfilename = $appname + ".exe"
                #RESOURCE VERSIONINFO
                #RESOURCE FILEFLAGS 0
                #RESOURCE FILEVERSION %appmajor, %appminor, %apprevision, %appbuild
                #RESOURCE PRODUCTVERSION %appmajor, %appminor, %apprevision, %appbuild
                #RESOURCE STRINGINFO "0409", "04B0"
                #RESOURCE VERSION$ "Comments", "Comments"
                #RESOURCE VERSION$ "CompanyName", "CompanyName"
                #RESOURCE VERSION$ "FileDescription", "FileDescription"
                '#RESOURCE VERSION$ "FileVersion", $appversion
                #RESOURCE VERSION$ "InternalName", "InternalName"
                #RESOURCE VERSION$ "LegalCopyright", "LegalCopyright"
                #RESOURCE VERSION$ "LegalTrademarks", "LegalTrademarks"
                #RESOURCE VERSION$ "OriginalFilename", $appfilename
                #RESOURCE VERSION$ "ProductName", $appname
                '#RESOURCE VERSION$ "ProductVersion", $appversion
                #RESOURCE MANIFEST, 1, "D:\PB10\Include\Manifest.xml"
                #DEBUG ERROR ON
                '#DEBUG DISPLAY ON ' will stop ON ERROR from working
                #COMPILE EXE
                #DIM ALL
                #OPTIMIZE SPEED
                #REGISTER NONE
                #TOOLS OFF

                3.14159265358979323846264338327950
                "Ok, yes... I like pie... um, I meant, pi."

                Comment


                • #9
                  Jim,

                  What's in your Manifest.xml? (Looks like you have a standard one for all applications.)
                  --
                  [URL="http://www.camcopng.com"]CAMCo - Applications Development & ICT Consultancy[/URL][URL="http://www.hostingpng.com"]
                  PNG Domain Hosting[/URL]

                  Comment


                  • #10
                    Avast/ZoneAlarm reexamine if a program is changed unless in exclusions under settings.
                    ZoneAlarm will also pop-up if using internet and program is changed (a great thing it checks outbound!)
                    Hopefully, everyone has used https://www.grc.com/lt/leaktest.htm to check if firewall checks outbound.

                    I added version information and Jose's manifest and www.virustotal.com no longer complains.

                    https://forum.powerbasic.com/forum/u...01-help-please
                    Last edited by Mike Doty; 23 Mar 2017, 11:24 AM.

                    Comment


                    • #11
                      Mike
                      But I tried downloading the grc leaktest demo, my mcafee gave out a warning and then remove the download

                      Click image for larger version

Name:	mcafee.png
Views:	1
Size:	28.8 KB
ID:	759497

                      Comment


                      • #12
                        I've download for years with different anti-virus programs and have never seen that. I just downloaded while Avast was running.

                        Comment

                        Working...
                        X