NO

Author Topic: avira recognizes a virus at socket connect function  (Read 5052 times)

grooves

  • Guest
avira recognizes a virus at socket connect function
« on: July 08, 2012, 08:08:52 pm »
Hi folks,

I wrote a small socket client program,
always when I use the connect function the AVIRA anti virus software detects a TR/Spy.Gen virus,
(http://www.avira.com/de/index)
also a indrect call via function pointer doesn't help,
I use the 6.50 compiler version, 6.00 didn't work either,

Any chance to solve the problem ?
Thanks and regards,
Micha

CommonTater

  • Guest
Re: avira recognizes a virus at socket connect function
« Reply #1 on: July 08, 2012, 08:24:05 pm »
We can probably help you fix it but, unfortunately none of us are mind readers. :D
We're gonna need to see your code.

Please zip up your project and attach it to your next message.  If it's too big to upload (256k limit) reduce your project to the smallest amount of code that demonstrates the problem and upload that...


Offline Stefan Pendl

  • Global Moderator
  • Member
  • *****
  • Posts: 567
    • Homepage
Re: avira recognizes a virus at socket connect function
« Reply #2 on: July 08, 2012, 10:10:35 pm »
In general always report false positives to the security software provider.
There is no way around it in many cases.
---
Stefan

Proud member of the UltraDefrag Development Team

CommonTater

  • Guest
Re: avira recognizes a virus at socket connect function
« Reply #3 on: July 08, 2012, 10:17:51 pm »
In general always report false positives to the security software provider.
There is no way around it in many cases.

Hi Stephan...  It was really fun the day EMSI decided POIDE was a virus...

Offline Stefan Pendl

  • Global Moderator
  • Member
  • *****
  • Posts: 567
    • Homepage
Re: avira recognizes a virus at socket connect function
« Reply #4 on: July 08, 2012, 10:53:58 pm »
Yes I know it is sometimes hard to get this pushed forward, but how would they know if you never tell them?

Some software vendors are faster and some slower to fix their bugs.
---
Stefan

Proud member of the UltraDefrag Development Team

CommonTater

  • Guest
Re: avira recognizes a virus at socket connect function
« Reply #5 on: July 09, 2012, 12:05:47 am »
Yes I know it is sometimes hard to get this pushed forward, but how would they know if you never tell them?

Some software vendors are faster and some slower to fix their bugs.

The good news is that EMSI supports a "White list" where POIDE now proudly resides...

Offline Vortex

  • Member
  • *
  • Posts: 531
    • http://www.vortex.masmcode.com
Re: avira recognizes a virus at socket connect function
« Reply #6 on: July 09, 2012, 11:30:02 am »
Unfortunately, some AV softwares have a high percentage of false-positives.

grooves, you can check Jotti's site :

http://virusscan.jotti.org/en
Code it... That's all...

grooves

  • Guest
Re: avira recognizes a virus at socket connect function
« Reply #7 on: July 10, 2012, 12:58:27 pm »
Vortex:
Thanks for the link, I have never thought how many viruses can be in my small program, :-),
i.e. : 
PUA.Win32.Packer.PellesC400450Ex-1
Backdoor.Win32.Poison!IK

probably all socket functions are potential dangerous for anti virus scanner.

I have now splitted the client and server in two separate programs, at least AVIRA doesn't recognize
a virus now, but it is really weird.

Thanks for all comments,
Regards,
Micha

Offline Vortex

  • Member
  • *
  • Posts: 531
    • http://www.vortex.masmcode.com
Re: avira recognizes a virus at socket connect function
« Reply #8 on: July 10, 2012, 07:03:38 pm »
Hi Micha,

Some AV companies are not commenting correctly the MS COFF file specification and this why they have a higher rate of false-positives.
Code it... That's all...

pitter2206

  • Guest
Re: avira recognizes a virus at socket connect function
« Reply #9 on: July 21, 2012, 11:08:41 am »
Avira is one of the badest with false positive messages.
All network activity form unknown programs are blocked...

But... you can send your coded piece of software to avira to review.
That works fine and the answer is fast that Avira is fixed for this program with the next update.