« previous next »
Pages: 1 [2]   Go Down

Author Topic: [RESOLVED] Every Compiled Program .EXE w(Delphi XE8) (Win32:Banker-MGC)  (Read 16228 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #15 on: September 17, 2015, 12:25:38 PM »
Thx for the quick fix.
Logged

REDACTED

  • Guest
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #16 on: September 17, 2015, 12:56:08 PM »
Ok, now works, but what happen with all our clients than our programs have been deleted? We need to restore all our .exe manually?
Logged

REDACTED

  • Guest
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #17 on: September 17, 2015, 12:57:19 PM »
Ok, now works, but what happen with all our clients than our programs have been deleted? We need to restore all our .exe manually?
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #18 on: September 17, 2015, 01:17:32 PM »
You can restore from the virus chest ..

Logged

REDACTED

  • Guest
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #19 on: September 17, 2015, 01:27:28 PM »
Quote from: essexboy on September 17, 2015, 01:17:32 PM
You can restore from the virus chest ..
Ok, and where it goes the files when AVAST tells that it DELETED? As informed, after detecting one, AVAST asked to reboot and scan the PC, while doing it DELETED many files. Where are the DELETED files? I checked in chest and are not there
Logged

REDACTED

  • Guest
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #20 on: September 17, 2015, 01:35:02 PM »
Quote from: andre.miertschink on September 17, 2015, 01:27:28 PM
Quote from: essexboy on September 17, 2015, 01:17:32 PM
You can restore from the virus chest ..
Ok, and where it goes the files when AVAST tells that it DELETED? As informed, after detecting one, AVAST asked to reboot and scan the PC, while doing it DELETED many files. Where are the DELETED files? I checked in chest and are not there

Delphi XE8, just got struck by this bug too, damn!!! rtl220.bpl deleted

Well I can't see it anywhere, in any chest or other places!

I had to disable avast (YET AGAIN) due to such a bug, makes it a very limited experience paying for Avast Pro.  >:(
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37534
  • Not a avast user
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #21 on: September 17, 2015, 01:37:48 PM »
Quote
I had to disable avast (YET AGAIN) due to such a bug,
it should be fixed now, have you run a manual update?

Logged

REDACTED

  • Guest
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #22 on: September 17, 2015, 01:45:09 PM »
Quote from: Pondus on September 17, 2015, 01:37:48 PM
Quote
I had to disable avast (YET AGAIN) due to such a bug,
it should be fixed now, have you run a manual update?

I did now and it works, luckily I had another dev pc not running Avast so I could restore the file (rtl220.bpl) from there.

I still consider the missing log and the disappearance of the file to be a serious bug. My avast have not logged any viruses since 9th of april 2015, don't really believe that to be true.
Logged

Offline lukas.hasik

  • Avast team
  • Advanced Poster
  • *
  • Posts: 931
  • Product manager of Avast Security for Windows
Re: Every Compiled Program .EXE w(Delphi XE8 - Delphi 10 Seattle) (Win32:Banker-MGC)
« Reply #23 on: September 17, 2015, 03:20:39 PM »
Logged
Quality is also a feature.

REDACTED

  • Guest
Re: [RESOLVED] Every Compiled Program .EXE w(Delphi XE8) (Win32:Banker-MGC)
« Reply #24 on: September 19, 2015, 11:03:15 PM »
There is a way to reduce chances to get this kind of bug happens again? This affect our credibility as software company and also Avast.
We should to suggest to our users do not use Avast if they could alert again that our software is infected when actually it is not. I wonder about Avast QA process.

Thanks,
Alvaro

Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37534
  • Not a avast user
Re: [RESOLVED] Every Compiled Program .EXE w(Delphi XE8) (Win32:Banker-MGC)
« Reply #25 on: September 19, 2015, 11:07:00 PM »
Quote from: abrange on September 19, 2015, 11:03:15 PM
There is a way to reduce chances to get this kind of bug happens again? This affect our credibility as software company and also Avast.
We should to suggest to our users do not use Avast if they could alert again that our software is infected when actually it is not. I wonder about Avast QA process.

Thanks,
Alvaro
Do you know a antivirus that have zero false positives?

Logged

REDACTED

  • Guest
Re: [RESOLVED] Every Compiled Program .EXE w(Delphi XE8) (Win32:Banker-MGC)
« Reply #26 on: December 13, 2015, 11:13:57 AM »
I just compiled a program with Rad Studio Seattle C++. Avast deletes the compiled program after compilation. I excluded the directory where my program is situated direct after compilation, but that's no solution of the problem. In that directory te program is preserved but when I move the executable to another directory the exe is deleted instantaniaously, in both directories (source and target directory)!!
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33904
  • malware fighter
Re: [RESOLVED] Every Compiled Program .EXE w(Delphi XE8) (Win32:Banker-MGC)
« Reply #27 on: December 13, 2015, 04:39:31 PM »
Well as you experience the constant Delphi XE8 FP drama, then this not only and exclusively an Avast issue,
but also playing at MBAM: https://forums.malwarebytes.org/index.php?/topic/168427-false-positive-32-bit-executables-created-with-delphi-xe8/
Avast has a particular FP prone history (twice a year) when scanning the directories where developers have put binaries into.
The malcreator impact from the past on the software at hand may be haunting us all and may lead to undesirable FPs.
Send the files to Avast and MBAM to be excluded: https://www.avast.com/contact-form.php
so they can fix such heuristical misdetections asap. :)
Fuzzing find such up, read here: http://googleprojectzero.blogspot.co.il/2015/09/kaspersky-mo-unpackers-mo-problems.html
In future, we would like to see antivirus unpackers, emulators and parsers sandboxed, not run with SYSTEM privileges.

polonus
« Last Edit: December 13, 2015, 06:08:07 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: 1 [2]   Go Up
« previous next »