Comments on: Antivirus companies cause a big headache to small developers. http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/ The official blog of nirsoft.net Sun, 14 Mar 2010 16:34:18 -0400 http://wordpress.org/?v=2.8.4 hourly 1 By: Wahyu Primadi http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-8241 Wahyu Primadi Sun, 14 Mar 2010 16:34:18 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-8241 #> My program (compressed with Executable Compressor) detected as virus by some antivirus products. #> My Console Program (running in debug mode) detected as virus by N0RT0N 4NT1V1RU5. #> My Windows Script Shell was blocked by some antivirus (feature called: script blocker). #> and others shit... :p I think i will create an antivirus by my self :D #> My program (compressed with Executable Compressor) detected as virus by some antivirus products.
#> My Console Program (running in debug mode) detected as virus by N0RT0N 4NT1V1RU5.
#> My Windows Script Shell was blocked by some antivirus (feature called: script blocker).
#> and others shit... :p

I think i will create an antivirus by my self :D

]]> By: Peter http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-8065 Peter Thu, 11 Mar 2010 19:51:21 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-8065 Suggestion, for False Positives. I run Norton AV 360. Twice I tried to run SearchMyFiles. The first time nothing happened. On closer examination, I noticed that Windows Task Manager listed it as a running process. Then I got a popup with the message SONAR detected security risk searchmyfiles.exe SONAR has removed security risk searchmyfiles.exe. Your computer is secure. Then I noticed that the program file was deleted. So, I re-extracted it from the download zip file and tried running it again "As Administrator" a Vista feature, thinking that i could over-ride the AV block. Same thing happened again. This time, I clicked on the SONAR details, and to Norton's 360 credit I saw the option to ignore this so called "threat" and ignore it in future scans. Now, it runs without problem and to NirSoft's credit, exceedingly well. Therefore, my suggestion is to check your Antivirus Software for options to ignore files/programs it detects as a "threat." Perhaps look for an exclusion list, but search and you will find, also contact your Antivirus publisher for help on this. Suggestion, for False Positives. I run Norton AV 360. Twice I tried to run SearchMyFiles.
The first time nothing happened. On closer examination, I noticed that Windows Task Manager listed it as a running process. Then I got a popup with the message
SONAR detected security risk searchmyfiles.exe
SONAR has removed security risk searchmyfiles.exe. Your computer is secure.
Then I noticed that the program file was deleted.
So, I re-extracted it from the download zip file and tried running it again "As Administrator" a Vista feature, thinking that i could over-ride the AV block.
Same thing happened again.
This time, I clicked on the SONAR details, and to Norton's 360 credit I saw the option to ignore this so called "threat" and ignore it in future scans.
Now, it runs without problem and to NirSoft's credit, exceedingly well.
Therefore, my suggestion is to check your Antivirus Software for options to ignore files/programs it detects as a "threat." Perhaps look for an exclusion list, but search and you will find, also contact your Antivirus publisher for help on this.

]]> By: Tilman http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-8063 Tilman Thu, 11 Mar 2010 18:08:09 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-8063 I am the developer of Xenu's Link Sleuth, a tool to find broken links. I've had my share of "false positives", I have described these adventures here: http://home.snafu.de/tilman/xenulink.html#spy I'll make a link to your blog post after submitting this. I am the developer of Xenu's Link Sleuth, a tool to find broken links. I've had my share of "false positives", I have described these adventures here:
http://home.snafu.de/tilman/xenulink.html#spy
I'll make a link to your blog post after submitting this.

]]> By: Donald Tidmore http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-7933 Donald Tidmore Wed, 10 Mar 2010 11:52:16 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-7933 Yesterday, I was at at a public library using their high-speed internet on one of their public access computer systems and I downloaded the new 1.8.9 version of Unlocker from the Majorgeeks site onto a flash drive. Nothing on the library system decided to pop up and complain about the file during its download, or once the download was completed. Nothing popped up when I moved the file from the computer's desktop area to my flash drive. I get home and start copying files from the flash drive to my system's hard drive, and suddenly Symantec's Norton Internet Security 2010 flags unlocker 1.8.9.exe as having a virus and deletes it forthwith without giving me the option of keeping it. The program's excuse for deleting the file is that it detected a heuristic virus which it named Suspicious.ADH . I'll see if I can submit the program to Symantec for re-evaluation, but am not that hopeful that will fix things. This isn't the first time when NIS decides a program has a virus on my system - which logic tells me should be completely safe. That's because the majority of EXE programs that I download these days almost always come from trusted web-sites such as Microsoft.com, filehippo.com, and majorgeeks.com. If we can't trust THOSE companies to scan everything that they post for public usage, then every computer user in the world is in big trouble I guess. Anyway, I thought I would mention my frustration with NIS in this situation after reading your blogs about most of the major antivirus companies finding false positives for viruses in a lot of programs. Winrar for example has had at least one of their recent beta releases flagged by NIS as having a virus. In that case, it may have been a legitimate virus removal since it was the virus that got put into a LOT of programs worldwide that were using Visual Basic if I remember correctly. As for the adware stuff, I wish every single system utility program maker was as nice as you are about letting people opt out of the crap they add. I am sick and tired of all these programs like RealPlayer that want to shove Google Chrome or Yahoo Toolbar or Ask Toolbar down people's throats. Some of them just install the adware without permission and that is really irritating. That happens a lot with Ask Toolbar. Its too bad the customers can't file complaints with the Federal Trade Commission over that kind of behavior from computer software makers - or can we? Thank you for making Unlocker. Its a lifesaver and prevents a lot of hair pulling when you have files on your system that Micro$oft Windows won't get rid of, no matter how many times you try to delete them. But once Unlocker gets sicced on the bad boy files, they get their comeuppance really fast! Yesterday, I was at at a public library using their high-speed internet on one of their public access computer
systems and I downloaded the new 1.8.9 version of Unlocker from the Majorgeeks site onto a flash drive. Nothing
on the library system decided to pop up and complain about the file during its download, or once the download
was completed. Nothing popped up when I moved the file from the computer's desktop area to my flash drive.

I get home and start copying files from the flash drive to my system's hard drive, and suddenly Symantec's
Norton Internet Security 2010 flags unlocker 1.8.9.exe as having a virus and deletes it forthwith without giving
me the option of keeping it. The program's excuse for deleting the file is that it detected a heuristic virus
which it named Suspicious.ADH . I'll see if I can submit the program to Symantec for re-evaluation, but am
not that hopeful that will fix things. This isn't the first time when NIS decides a program has a virus on my
system - which logic tells me should be completely safe. That's because the majority of EXE programs that
I download these days almost always come from trusted web-sites such as Microsoft.com, filehippo.com,
and majorgeeks.com. If we can't trust THOSE companies to scan everything that they post for public usage,
then every computer user in the world is in big trouble I guess.

Anyway, I thought I would mention my frustration with NIS in this situation after reading your blogs about
most of the major antivirus companies finding false positives for viruses in a lot of programs. Winrar for
example has had at least one of their recent beta releases flagged by NIS as having a virus. In that case,
it may have been a legitimate virus removal since it was the virus that got put into a LOT of programs
worldwide that were using Visual Basic if I remember correctly. As for the adware stuff, I wish every single
system utility program maker was as nice as you are about letting people opt out of the crap they add.

I am sick and tired of all these programs like RealPlayer that want to shove Google Chrome or Yahoo Toolbar
or Ask Toolbar down people's throats. Some of them just install the adware without permission and that is
really irritating. That happens a lot with Ask Toolbar. Its too bad the customers can't file complaints with
the Federal Trade Commission over that kind of behavior from computer software makers - or can we?

Thank you for making Unlocker. Its a lifesaver and prevents a lot of hair pulling when you have files on
your system that Micro$oft Windows won't get rid of, no matter how many times you try to delete them.
But once Unlocker gets sicced on the bad boy files, they get their comeuppance really fast!

]]> By: frankie http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-7489 frankie Wed, 03 Mar 2010 13:00:02 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-7489 i love these tools sad to hear that small companies are being target as victims as viruses into there software but the bad thing if big company's like Microsoft is able bypass any anti-virus software with no problems that's bad too all we need is some nogood doers to start cloning there virus as Microsoft software. i love these tools sad to hear that small companies are being target as victims as viruses into there software but the bad thing if big company's like Microsoft is able bypass any anti-virus software with no problems that's bad too all we need is some nogood doers to start cloning there virus as Microsoft software.

]]> By: YsenGrin http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-7450 YsenGrin Tue, 02 Mar 2010 18:20:13 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-7450 Always the same problem.... Two stories : 1 I work in a big company which has a "secured" network. Last week, a technician came to see me "Who is mister X ?". "It's me..." "You have some hacking tools on your computer" I was obliged to delete the whole nirsoft utilities... 2 malekal.com is a french site dedicated to security, a really good site where people always help you. For me it's the best resource in french about security. The whole site was flagged by siteadvisor (a McAfee emanation) as a spyware provider... A spyware fix named Combofix.exe was considered as a trojan. I well known this fix, it works well, and it can fix some infection that McAfee couldn't fix or even detect... Always the same problem.... Two stories :

1

I work in a big company which has a "secured" network. Last week, a technician came to see me

"Who is mister X ?".
"It's me..."
"You have some hacking tools on your computer"

I was obliged to delete the whole nirsoft utilities...

2

malekal.com is a french site dedicated to security, a really good site where people always help you. For me it's the best resource in french about security.
The whole site was flagged by siteadvisor (a McAfee emanation) as a spyware provider... A spyware fix named Combofix.exe was considered as a trojan.

I well known this fix, it works well, and it can fix some infection that McAfee couldn't fix or even detect...

]]> By: Adrián http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-7185 Adrián Wed, 24 Feb 2010 05:53:05 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-7185 Find MessenPass via a post by Tina. 6 Free Password Recovery Tools for Windows. I want to thank the creator, or creators of NirSoft. I had several days trying to get back the password of MySpaceIM, and surprise. MessenPass did the dirty job. Do not listen to anti-virus, this program does its job and has to move things to succeed. Thanks Again. Find MessenPass via a post by Tina. 6 Free Password Recovery Tools for Windows.

I want to thank the creator, or creators of NirSoft. I had several days trying to get back the password of MySpaceIM, and surprise. MessenPass did the dirty job.

Do not listen to anti-virus, this program does its job and has to move things to succeed.

Thanks Again.

]]> By: alejorosario http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-6779 alejorosario Sat, 13 Feb 2010 15:07:14 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-6779 We must leave the window behind... We must use free software! Go GNU...!!! We must leave the window behind...
We must use free software!

Go GNU...!!!

]]> By: rocky http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-6398 rocky Sat, 06 Feb 2010 19:11:55 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-6398 I extracted the files on another computer to USB key and copied them to my HD. I still got the warning message but was able to add files to the exceptions list. however if you`re not quick about it will go straight to the remove/heal popup (which i just closed- extraction is prevented but nothign happens when the files are already there.) I extracted the files on another computer to USB key and copied them to my HD. I still got the warning message but was able to add files to the exceptions list. however if you`re not quick about it will go straight to the remove/heal popup (which i just closed- extraction is prevented but nothign happens when the files are already there.)

]]> By: rocky http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/comment-page-2/#comment-6396 rocky Sat, 06 Feb 2010 19:05:59 +0000 http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/#comment-6396 AVG is allowing me to choose to ignore the threat, but it still stops me from extracting the files. While I can disable the resident shield, soethign else blocks the extraciton which i cannot disable. AVG is allowing me to choose to ignore the threat, but it still stops me from extracting the files. While I can disable the resident shield, soethign else blocks the extraciton which i cannot disable.

]]>