locked
My program is seen as a virus RRS feed

  • Question

  • I need to make a game for a school project.
    However if i scan the executable file it says it's a Gen:Variant.Strictor.74818 virus.
    https://www.virustotal.com/nl/file/82f21c16258e0df3b6574efa1d5fdc10696fe6ae339707f38854e3a0094a25e1/analysis/1431794039/

    I've already taken all code out of the project, i recompiled it, scanned it again but according to multiple AV's my program is still a virus. I don't understand the cause and can't seem to find a solution.

    Saturday, May 16, 2015 5:23 PM

Answers

  • I already scanned my pc for mallware and viruses,
    it did only return the executable file from my project. 
    I take the file out of the bin/debug folder to control for the virus but the file that's published and signed also gives the same virus message.
    In my project i use the user32.dll library for blocking the user interactions for a short period while the game is loading. And for hiding the mouse pointer. However i deleted this part of the code scanned the executable file and kept having a virus. 


    I'm working with microsoft visual basic express edition.

    Then apparently viral detection software suspects the code you've written to be malicious in nature.

    Code that disallows user interaction, in any way, shape or form, may be considered malicious in nature by viral detection software.

    It's possible you could send your code to the companies that write the viral detection software you use to ask them if your code is malicious in nature according to their definitions.

    Referencing a .Dll would not make an application malicious in nature unless perhaps the .Dll was virus ridden.

    It's doubtful that any assemblies compiled in which there is no user developed code in them would be considered viral in nature as the only code would be from whatever app type was chosen and associated controls in the assembly and maybe ref'd assemblies. Other than the assemblie(s) does not have an approved certification with it which then may cause an issue when attempting to install the assemblie(s) on a system using an installer where a warning would occur about it not being from a trusted source.

    To provide any information which would possibly allow somebody to alter code possibly malicious in nature so it is not intercepted by viral detection or provide code which could possibly be malicious in nature that could bypass viral protection in these forums is not really accepted.

    If altering the apps name doesn't do anything then try creating a different app that is just a windows.forms app and compile it then scan the .exe. Don't bother doing anything to it, adding code or controls, prior to compiling it. Just compile it then scan the assembly and see what happens.

    You didn't by chance download a project which you then opened and altered for your app did you?


    La vida loca


    • Edited by Mr. Monkeyboy Saturday, May 16, 2015 7:21 PM
    • Marked as answer by Arnec1998 Saturday, May 16, 2015 8:32 PM
    Saturday, May 16, 2015 7:20 PM

All replies

  • Hello,

    First option is to change the name of the project. If that fails then see if there is an option to exclude your program from the anti-virus program.

    Alternate for option 1, under project properties change the namespace to another name.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help, this will help others who are looking for solutions to the same or similar problem. Contact via my webpage under my profile but do not reply to forum questions.

    • Proposed as answer by Cor Ligthert Saturday, May 16, 2015 6:11 PM
    Saturday, May 16, 2015 5:34 PM
  • You need to make a game project for school.

    You scan some executable file and it's a virus.

    You provide some link.

    You don't mention much other than removing all code from a project, compiling the project and scanning something that says something is still a virus.

    Perhaps you should scan your system to remove any malware or viruses from it before continuing on.

    Without detailed information of exactly what you are doing, pretty much step by step, including what compile settings your (I will guess Visual Studio of some version) programming app is set for it is fairly difficult to understand what you are doing and what you are scanning.

    None of which really is vb.net related.


    La vida loca

    Saturday, May 16, 2015 5:56 PM
  • I already scanned my pc for mallware and viruses,
    it did only return the executable file from my project. 
    I take the file out of the bin/debug folder to control for the virus but the file that's published and signed also gives the same virus message.
    In my project i use the user32.dll library for blocking the user interactions for a short period while the game is loading. And for hiding the mouse pointer. However i deleted this part of the code scanned the executable file and kept having a virus. 


    I'm working with microsoft visual basic express edition.

    Saturday, May 16, 2015 6:40 PM
  • Okay, first off, as Mr. Monkeyboy indicated, this is not a VB.NET code issue unless you have malicious code within it which we don't condone here, if not please follow what I suggested if there is no malicious code change the assembly name and try again.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help, this will help others who are looking for solutions to the same or similar problem. Contact via my webpage under my profile but do not reply to forum questions.

    Saturday, May 16, 2015 6:54 PM
  • I already scanned my pc for mallware and viruses,
    it did only return the executable file from my project. 
    I take the file out of the bin/debug folder to control for the virus but the file that's published and signed also gives the same virus message.
    In my project i use the user32.dll library for blocking the user interactions for a short period while the game is loading. And for hiding the mouse pointer. However i deleted this part of the code scanned the executable file and kept having a virus. 


    I'm working with microsoft visual basic express edition.

    Then apparently viral detection software suspects the code you've written to be malicious in nature.

    Code that disallows user interaction, in any way, shape or form, may be considered malicious in nature by viral detection software.

    It's possible you could send your code to the companies that write the viral detection software you use to ask them if your code is malicious in nature according to their definitions.

    Referencing a .Dll would not make an application malicious in nature unless perhaps the .Dll was virus ridden.

    It's doubtful that any assemblies compiled in which there is no user developed code in them would be considered viral in nature as the only code would be from whatever app type was chosen and associated controls in the assembly and maybe ref'd assemblies. Other than the assemblie(s) does not have an approved certification with it which then may cause an issue when attempting to install the assemblie(s) on a system using an installer where a warning would occur about it not being from a trusted source.

    To provide any information which would possibly allow somebody to alter code possibly malicious in nature so it is not intercepted by viral detection or provide code which could possibly be malicious in nature that could bypass viral protection in these forums is not really accepted.

    If altering the apps name doesn't do anything then try creating a different app that is just a windows.forms app and compile it then scan the .exe. Don't bother doing anything to it, adding code or controls, prior to compiling it. Just compile it then scan the assembly and see what happens.

    You didn't by chance download a project which you then opened and altered for your app did you?


    La vida loca


    • Edited by Mr. Monkeyboy Saturday, May 16, 2015 7:21 PM
    • Marked as answer by Arnec1998 Saturday, May 16, 2015 8:32 PM
    Saturday, May 16, 2015 7:20 PM
  • After i made a new project and coppied al my files in the new project.
    The compiled version of my project isn't seen as a virus anymore.
    Thank you for the answers.
    Saturday, May 16, 2015 8:37 PM