Convincing AntiVirsus, im not a virus

Started by
55 comments, last by dsm1891 8 years, 7 months ago

what directory and file name did you try this time?

do you need me to create a new console project, and send you a test exe, source, solution file, etc?

the exe would test your C runtime, AV, and UAC. the project files would test your compiler install.


Mobile Developer at PawPrint Games ltd.
(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)
(Although I am mobile. no, not as in a babies mobile, I move from place to place)
(Not "place" as in fish, but location.)

sounds like Mr Kimball from Green Acres - well, not exactly like him - he usually talked about crops, not phones, unless it was a phonecrop - or was it a cropphone? Anyway - good luck fishing for your mobile baby! <g>.

WELL, im glad to know atleast one person has read (and appreciated) my signature.

As it turns out, running on my Work PC as admin I was able to write to files. However if I run as admin at home, I do not get an output

Mobile Developer at PawPrint Games ltd.

(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)

(Although I am mobile. no, not as in a babies mobile, I move from place to place)

(Not "place" as in fish, but location.)

Advertisement

As it turns out, running on my Work PC as admin I was able to write to files. However if I run as admin at home, I do not get an output

I think at this point, we can safely assume your PC is hosed in some way.

Are you willing to uninstall that anti-virus entirely, to see if that makes a difference? And then reinstall it afterwards, and test again?

Tristam MacDonald. Ex-BigTech Software Engineer. Future farmer. [https://trist.am]

As it turns out, running on my Work PC as admin I was able to write to files. However if I run as admin at home, I do not get an output

I think at this point, we can safely assume your PC is hosed in some way.

Are you willing to uninstall that anti-virus entirely, to see if that makes a difference? And then reinstall it afterwards, and test again?

I have come this far. Will update after this.

Mobile Developer at PawPrint Games ltd.

(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)

(Although I am mobile. no, not as in a babies mobile, I move from place to place)

(Not "place" as in fish, but location.)

Apparently this is a known issue with avast and vs13. Turns out avast deep shield was, atleast a part of the problem.
https://forum.avast.com/index.php?topic=139935.0

Mobile Developer at PawPrint Games ltd.

(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)

(Although I am mobile. no, not as in a babies mobile, I move from place to place)

(Not "place" as in fish, but location.)

And this would be an excellent illustration of why the first advice is always "don't use antivirus" smile.png

Tristam MacDonald. Ex-BigTech Software Engineer. Future farmer. [https://trist.am]

Or just use the free AV from Microsoft. MS has no need to have its AV "prove its usefulness" by intentionally generating false positives and they are less likely to screw up VS or Windows, as they know more about it and don't want to screw up their own stuff.

Apparently this is a known issue with avast and vs13. Turns out avast deep shield was, atleast a part of the problem.
https://forum.avast.com/index.php?topic=139935.0

According to the post there isn't a solution. I think it's time for you to start looking for a more serious AV product if you really think you need AV to use your pc...

Basically what they're saying is "avast isn't a program for any power user or developer just a casual home user that browses the Web and reads email".

I think it is a little silly how Deep shield doesn't flag for VS09 applications, and even sillier that their (Avasts) official advice is "if you compile programs, don't use it".

The full extent of what happened is a combination of Deep shield false flagging the app as malware, andNot running the app as Admin on another PC (or the code I tested on the other pc ) or that on creation of the app it was flagged as malware and hence would not run on another pc with a different AV - don't know if that is a thing

Mobile Developer at PawPrint Games ltd.

(Not "mobile" as in I move around a lot, but as in phones, mobile phone developer)

(Although I am mobile. no, not as in a babies mobile, I move from place to place)

(Not "place" as in fish, but location.)

Well I'm using Avast with "DeepShield", "Auto Sandbox" and "Community" disabled and I have no problem with it. Ironically, those are exactly the features that I paid money pay for, compared to the free edition (which I find quite good, better than the version that you pay for).

All in all, I wouldn't want to run without Antivirus at all (besides, Windows doesn't really allow you to, anyway) but there are not many good choices. Microsoft's antivirus is abysmal, I have it on my convertible and it regularly fucks up the complete device (running while I'm using the device and using up 100% CPU on one core) making it unresponsive, or draining the battery while the lid is closed and you'd expect that you can still use the device the next morning. There is apparently no way to disable its live scan functionality, either.

Kaspersky turns even a powerful desktop machine entirely unusable, Symantec likewise (and Symantec doesn't even detect some very obvious things like browser hijacks, I've just had this on my wife's laptop which is some typical enterprise-crap setup with ten thousand policies and Symantec installed locally and automated monthly remote registry and system file scans -- she got a notice from IT dept that she was "required to remove spyware" within two days, and Symantec simply reported "no problems").

Malwarebytes is a nice and fast on demand-scanner (which did find that hijack in 4 minutes) but it is pretty useless since it silently ignores iSCSI drives and SMB shares. With the download folder being the primary entry vector and that one living on iSCSI on my system, that's no go.

While I can still understand that it might not work with SMB for some obscure reason (a well-known Adobe program does, too), failing to scan iSCSI devices is a big WTF... they are (or should be) indistinguishable from a real drive.

This topic is closed to new replies.

Advertisement