Printable View
What the heck?
I had a friend today accuse me of sending him a virus when I sent a simple copy of my game.
I did a test of a blank MMF stand alone and it still shows up as AdWare!! Obviously this is a false positive but it ruins MMF's reputation.
VirusTotal Report
It does. Report false positives like this to the respective anti-virus companies - that's the only way to get rid of these.
Either that, or you do actually have that virus and it's infecting every MMF app you make.
A false positive is much more likely.
Yea its the junk little virus scanners too. All the legit ones don't do it.
erm...are you trying to develop a virus? :p
Yes, and the virus scanner magically knows that!
It said Adware not Virus, not the same thing but he could be trying to develop Adware, I don't know what he's doing. My advice for our Canadish friend here is to get AVG Free, Iv'e never had any real problems with it.Quote:
Originally Posted by Attus
I have :)Quote:
Originally Posted by dragonguy
I switched to Avast home (it's free but you have to register)
I scanned a blank application for this test. I'm not making adware anything. I simply made a new app and built it as stand alone. Then I submitted it online to VirusTotal. It reported it as Adware and Joke something.
You guys can try it too. Just build a blank app and upload it to VirusTotal. It detects it as a virus... why? I don't know.
Try it in MMF HWA version.
See if that makes a difference.
-Variant
You do know your virustotal link goes to a scan of "svchost.exe", right? If you really did name your MMF app that, the fact that it's the name of a major part of windows could trigger some scanners. Otherwise, you're looking at the wrong report...
I just uploaded a blank exe and got 2 false positives aswell.
http://www.virustotal.com/analisis/113fe38c6b361e298076c60cf41d1bd672c3488b4274fc81f0 b1b41a35c21171-1264755102
Notice the name is nothing suspicious.
Wait, "Symantec"? As in "Symantec Norton Antivirus"? The most common antivirus is detecting MMF apps as false positives? Great...
Also, looking at the bottom, everything in the "Additional Information" section doesn't match the original report. Obviously Peter did link us to the wrong report :)
Virus Total uses 40 different engines. From Avast to Symantec, etc. I scanned a program I downloaded from here, Kung Fu 2, and one of the AV engines used, The HAcker, labeled Kung Fu 2 as Adware/Badjoke.Formatter.d.
For some reason there's something in either the headers of MMF2 generated files or something that these AV engines see as a virus/trojan/joke/etc.
For developers that haven't created a name for theirself, getting their software picked up by Symantec is a blow. Granted, most should know here that AV software is not 100% accurate, however, the average paranoid user usually believes whatever the AV companies tell them.
Edit
I downloaded and installed TGF2. I uploaded the core file, TGF2.exe. The Symantec engine labeled it as Suspicious.Insight.
So far I've seen that "Hacker" thing on VirusTotal flag every file we've scanned with it. I think it can be safely ignored. I normally use http://virusscan.jotti.org/, anyway.
EDIT: But Symantec flagging MMF files as suspicious could be a serious problem for us.
OK this is ridiculous, I installed Norton and every application I build, it flags it as a virus and deletes it. How the heck do we fix this? Someone needs to complain to these stupid anti-virus companies to fix their faulty software.
I just built an empty application and look... VIRUS! by Symantec, and 3 other scanners! Norton is used by millions of people...
http://www.virustotal.com/analisis/7a39f413c9375f9752a948f0acfb2b5fb3ccf1475b73de3814 235d1f0558125b-1267488139
Maybe people should stop making virus apps with MMF2
If you're reading this and this is you ^ ...
Take the hint :P
I'm making a game, not a virus. I don't know how to make a virus...
I know you're not :)
I'm thinking the other people that do cause MMF2 apps to be flagged
I have never had any issues with MMF apps and I have used Avast, AVG and norton on my PC's before
I think Clickteam should sue Symantec. This has gone on long enough.
And it's bad. It would be like I made an anti-virus that flags everything compiled with MS Visual C# as a virus. MMF is a platform, and it's time people start treating it as such. If it isn't for good, it will be for worse.
Everyone needs to be calm. Report any false positives to the anti-virus company that flagged the application. That is the correct procedure.
Yes it is frustrating,but everyone needs to stay frosty.
Marv
This is very dumb, I have TGF2 as well and it deletes the file as soon as I build the game. How do you even complain? I'm looking through their web site right now and see nothing.
Stupid virus scanners these days are useless. They clearly flagged the runtime because they are complete idiots.
From what I've read on the forums this has been a long-going issue. How log? A year? A couple years? I can understand patience but as popular as Norton is (trial versions installed in most new computers from the factory) and then they download a program made by MMF2 and think it's a virus.Quote:
Originally Posted by nivram
For a person that really doesn't have a reputation it can really shoot their reputation in to the negatives in a heartbeat.
I can understand your feelings here. If this happened to me and it has been quite a while I would be sending certified letters to the Registered agent of Symantec corporation threatening a class action suit. Maybe that would light a fire under their butts?Quote:
Originally Posted by Fimbul
The only reason why I feel so outspoken about this is because as a computer tech I know first-hand how the average Joe/Jane user gets paranoid at the thought of being infected. That can very quickly turn in to people talking on the net about people's software being infected.
As a long-time user on CNET's Downloads.com, I know all to well how easily people are ready to rip the head off of the programmer because they "...infected my computer."
I've been non-active in forum for months and I found this topic. I think I am the one who caused this problem.
Two years ago I made a prank program with MMF2 and distributed it over the internet. It's also submitted to popular download sites like download.com and softpedia.com. It's getting popular and the user spread it again to their friends and forums (that's what I've found).
I think it's my prank program that causing this false positive problem. I'm very sorry because this issue have been bothering you all :( I was completely newbie at the time making this program so I don't know what the effect will be causing. Now I'm aware for this problem. I won't making such program again.
I would remove my prank program from those download sites but not at all because it has been spread everywhere by users. I've tried to send false positive reports to the antivirus vendor and doesn't get good feedback. Because they flag my prank program in Joke category.
If there is anything I should do then I would be responsible and try my best.
P.S. Sorry I'm horrible at English...
I've just found this linkQuote:
Originally Posted by Peter013
I've submitted example files, you should do it too.
I don't think it was you. At least, not just you. There have been several MMF-made malware things, it's the AV's fault for assuming everything MMF-made is malware. If we give them false-positive reports, they should sort it.Quote:
Originally Posted by Ran_TH
Yes. You're right. They should fix the false positive problem.Quote:
Originally Posted by Dynasoft
I will remove my prank programs on download.com, softpedia and my website. I know it won't help so much but at least this is to showing my responsibility.
How bad was this program? I can't see anything too major being made in MMF besides it deleting some files...Quote:
Originally Posted by Ran_TH
I think that it's not a very easy task to detect whether a MMF2 application is a malware app or not, at least if it isn't made in developer. If it is made in Standard, it runs around with the same tag, description, and other things that the Anti-Virus will flag if it ends up being a malware app. I'm glad you're doing that, Ran_TH. I removed my program as well, although it was just for gwerdy users (it replaced the sounds with joke ones) from Clickteam.
doesn't happen here, but i think peter's computer is infected, and is infecting his exe's with a virus. I got no such issue here.
Very, very unlikely.Quote:
Originally Posted by 00J
My prank program doesn't harm the computer, it just a "virus simulation". It display HDD formatting progress bar, computer beep etc. It doesn't modify nor delete any files on computer.Quote:
Originally Posted by Peter013
Antivirus vendor flag this program in Joke category. Some antivirus are clever enough to give a name "Win32/BadJoke.Formatter" so people will think it's a real virus, which is not.
I'm in process in removing those programs from download site. However I can't stop this program spreading around the net by the users.
Dude my comp is not infected.Quote:
Originally Posted by 00J
And I just submitted the demoapp.exe file to Symantec, DrWeb and a bunch of other companies to remove the false positive. Symantec said it would be removed from their database in the next release.
So nobody make viruses or joke apps anymore!!
Anti-virus programs definitely have no sense of humour... :(Quote:
My prank program doesn't harm the computer, it just a "virus simulation". It display HDD formatting progress bar, computer beep etc. It doesn't modify nor delete any files on computer.
Kaspersky started reporting it yesterday, they told me it would be fixed in the next update, probably today. A-squared fixed it. But I see now 1 or 2 others report it too. :(
Correct me if im wrong, but im sure this has nothing to do with real virus, past prank virus games or anything as such, but its to do with how MMF creates and embeds data inside its exe files.
I had the problem when i tried to distribute a nice little app on a forum to help members with a subject, they loved it untill someone came on and told everyone to delet ea its a virus and i got banned, for a while anyway, untill i proved otherwise.
very unfortunate thing, although i now use delphi for most things, but still stop by here for a while and its a sad thing to see this is still an on going problem, a quick search should flag my old thread up.
Andy
Yes if MMF was a compiler like Delphi maybe this issue would not concern all the applications created with MMF, as each application would have a different signature.
And MMF2-made applications don't have unique signatures already? Why? Can this be implemented?Quote:
Originally Posted by Yves
Antivirus signatures are normally from the actual executable code of an application. In the case of an MMF app, the only actual executable code is the MMF runtime and extensions, your events are just data. Making MMF into an actual compiler is infeasible.
This is true even in the Java/flash runtimes, I think.
You are correct. The actionscript of every Flash runtime built swf is nearly identical, and if you open a jar (it's just a zip file try it for yourself) you'll see very similar files in every Java runtime compiled jar with the actual "program" just data which is interpreted by the runtimes.Quote:
Originally Posted by Dynasoft