Author Topic: I haven't bunched up panties here lately, so he I go.  (Read 3375 times)

0 Members and 1 Guest are viewing this topic.

Offline doppler

  • Forum Regular
  • Posts: 241
    • View Profile
I haven't bunched up panties here lately, so he I go.
« on: March 29, 2021, 03:32:45 pm »
While use the latest greatest release code (v1.5 32bit).  I came across a Windows defender interruption.

I was using the CTRL-Z to back out some changes made.  I may have gone to far backing out.  I was pissed and wanted to quickly back it out.
While I was banging the CTRL-Z windows and QB64 threw exceptions.  I might have hit too many CTRL-Z's

The IDE interface just croaked with an exception (didn't catch it) but windows exception was interesting.

This file: C:\qb64\internal\temp\undo2.bin
Was identified as: TrojanDropper:VBS/Mikey.A!MSR

A reboot was required, as you know windows buries defender problem files.  If someone knows where and how to get the error record out of defender without creating more problems I will post the contents.

Win 10 core2 duo, 4gb and I don't run unknowns and cause grief.
Have a great day, I know I didn't.


Offline SpriggsySpriggs

  • Forum Resident
  • Posts: 1145
  • Larger than life
    • View Profile
    • GitHub
Re: I haven't bunched up panties here lately, so he I go.
« Reply #1 on: March 29, 2021, 04:16:03 pm »
Did you read the message that popped up when you first launched the new install that tells you to make sure you whitelist your QB64 IDE and the folder in your antivirus? That message is very important to read. Go whitelist the IDE and folder in Windows Defender and whatever other antivirus software you have. Also, set the access of your QB64 folder to "Everyone" and "Full Control".
Shuwatch!

FellippeHeitor

  • Guest
Re: I haven't bunched up panties here lately, so he I go.
« Reply #2 on: March 29, 2021, 04:19:11 pm »
Hi, doppler.

internal/temp/undo2.bin will contain several copies of the latest source code files you edited with the IDE. Every keystroke, every insertion and deletion you make to your code in the IDE gets a new copy of the whole file to be added to undo2.bin until it hits the limit of MB you can configure in the Options menu:

  [ You are not allowed to view this attachment ]  

Whatever Windows Defender detected as a VBS file (note how similar VBScript is to QBasic/BASIC) is actually a portion of some source code you wrote during that session - as stated, all code in undo2.bin was either typed by you or pasted in the IDE.

As it's always recommended, follow these instructions:

  [ You are not allowed to view this attachment ]  

And also whitelist qb64.exe as a process, all in Windows Defender's interface.

Offline doppler

  • Forum Regular
  • Posts: 241
    • View Profile
Re: I haven't bunched up panties here lately, so he I go.
« Reply #3 on: March 29, 2021, 05:25:28 pm »
Well then who reads those pesky welcome windows ........... Maybe I should.

Reminds me, Of EULA's.  A company long ago, wrote a multi-page EULA.  It had all the mumbo, jumbo which makes them so enjoyable.  Except this one had a Easter egg in it.  The last paragraph had a message: "If you read this far, here is a freebee."  Send a request to this email address to receive a free activation code.  The program was worth the minimal charge but was free if you read to the end.  Only 1 person did.  After it became known no more freebee's.

Maybe a reminder sticky should be posted in forum.  This is the first time I ever heard of this happening in QB64.

 
« Last Edit: March 29, 2021, 05:27:00 pm by doppler »

FellippeHeitor

  • Guest
Re: I haven't bunched up panties here lately, so he I go.
« Reply #4 on: March 29, 2021, 05:29:31 pm »
We'll make it bright red with a skull in the next version.


WHITELIST QB64.EXE AND ITS WHOLE FOLDER IN YOUR ANTIVIRUS/ANTIMALWARE SOFTWARE
WE'RE GOOD.
                             ...----....
                         ..-:"''         ''"-..
                      .-'                      '-.
                    .'              .     .       '.
                  .'   .          .    .      .    .''.
                .'  .    .       .   .   .     .   . ..:.
              .' .   . .  .       .   .   ..  .   . ....::.
             ..   .   .      .  .    .     .  ..  . ....:IA.
            .:  .   .    .    .  .  .    .. .  .. .. ....:IA.
           .: .   .   ..   .    .     . . .. . ... ....:.:VHA.
           '..  .  .. .   .       .  . .. . .. . .....:.::IHHB.
          .:. .  . .  . .   .  .  . . . ...:.:... .......:HIHMM.
         .:.... .   . ."::"'.. .   .  . .:.:.:II;,. .. ..:IHIMMA
         ':.:..  ..::IHHHHHI::. . .  ...:.::::.,,,. . ....VIMMHM
        .:::I. .AHHHHHHHHHHAI::. .:...,:IIHHHHHHMMMHHL:. . VMMMM
       .:.:V.:IVHHHHHHHMHMHHH::..:" .:HIHHHHHHHHHHHHHMHHA. .VMMM.
       :..V.:IVHHHHHMMHHHHHHHB... . .:VPHHMHHHMMHHHHHHHHHAI.:VMMI
       ::V..:VIHHHHHHMMMHHHHHH. .   .I":IIMHHMMHHHHHHHHHHHAPI:WMM
       ::". .:.HHHHHHHHMMHHHHHI.  . .:..I:MHMMHHHHHHHHHMHV:':H:WM
       :: . :.::IIHHHHHHMMHHHHV  .ABA.:.:IMHMHMMMHMHHHHV:'. .IHWW
       '.  ..:..:.:IHHHHHMMHV" .AVMHMA.:.'VHMMMMHHHHHV:' .  :IHWV
        :.  .:...:".:.:TPP"   .AVMMHMMA.:. "VMMHHHP.:... .. :IVAI
       .:.   '... .:"'   .   ..HMMMHMMMA::. ."VHHI:::....  .:IHW'
       ...  .  . ..:IIPPIH: ..HMMMI.MMMV:I:.  .:ILLH:.. ...:I:IM
     : .   .'"' .:.V". .. .  :HMMM:IMMMI::I. ..:HHIIPPHI::'.P:HM.
     :.  .  .  .. ..:.. .    :AMMM IMMMM..:...:IV":T::I::.".:IHIMA
     'V:.. .. . .. .  .  .   'VMMV..VMMV :....:V:.:..:....::IHHHMH
       "IHH:.II:.. .:. .  . . . " :HB"" . . ..PI:.::.:::..:IHHMMV"
        :IP""HHII:.  .  .    . . .'V:. . . ..:IH:.:.::IHIHHMMMMM"
        :V:. VIMA:I..  .     .  . .. . .  .:.I:I:..:IHHHHMMHHMMM
        :"VI:.VWMA::. .:      .   .. .:. ..:.I::.:IVHHHMMMHMMMMI
        :."VIIHHMMA:.  .   .   .:  .:.. . .:.II:I:AMMMMMMHMMMMMI
        :..VIHIHMMMI...::.,:.,:!"I:!"I!"I!"V:AI:VAMMMMMMHMMMMMM'
        ':.:HIHIMHHA:"!!"I.:AXXXVVXXXXXXXA:."HPHIMMMMHHMHMMMMMV
          V:H:I:MA:W'I :AXXXIXII:IIIISSSSSSXXA.I.VMMMHMHMMMMMM
            'I::IVA ASSSSXSSSSBBSBMBSSSSSSBBMMMBS.VVMMHIMM'"'
             I:: VPAIMSSSSSSSSSBSSSMMBSSSBBMMMMXXI:MMHIMMI
            .I::. "H:XIIXBBMMMMMMMMMMMMMMMMMBXIXXMMPHIIMM'
            :::I.  ':XSSXXIIIIXSSBMBSSXXXIIIXXSMMAMI:.IMM
            :::I:.  .VSSSSSISISISSSBII:ISSSSBMMB:MI:..:MM
            ::.I:.  ':"SSSSSSSISISSXIIXSSSSBMMB:AHI:..MMM.
            ::.I:. . ..:"BBSSSSSSSSSSSSBBBMMMB:AHHI::.HMMI
            :..::.  . ..::":BBBBBSSBBBMMMB:MMMMHHII::IHHMI
            ':.I:... ....:IHHHHHMMMMMMMMMMMMMMMHHIIIIHMMV"
              "V:. ..:...:.IHHHMMMMMMMMMMMMMMMMHHHMHHMHP'
               ':. .:::.:.::III::IHHHHMMMMMHMHMMHHHHM"
                 "::....::.:::..:..::IIIIIHHHHMMMHHMV"
                   "::.::.. .. .  ...:::IIHHMMMMHMV"
                     "V::... . .I::IHHMMV"'
                       '"VHVHHHAHHHHMMV:"'

Offline bplus

  • Global Moderator
  • Forum Resident
  • Posts: 8053
  • b = b + ...
    • View Profile
Re: I haven't bunched up panties here lately, so he I go.
« Reply #5 on: March 29, 2021, 05:32:57 pm »
Ha, that ought to un-bunch Pete's ascii's!

Offline SpriggsySpriggs

  • Forum Resident
  • Posts: 1145
  • Larger than life
    • View Profile
    • GitHub
Re: I haven't bunched up panties here lately, so he I go.
« Reply #6 on: March 29, 2021, 06:44:27 pm »
@doppler This has always been an issue in QB64. The message is new. Moral of the story: Look before you leap...
Shuwatch!

Offline TempodiBasic

  • Forum Resident
  • Posts: 1792
    • View Profile
Re: I haven't bunched up panties here lately, so he I go.
« Reply #7 on: March 30, 2021, 05:06:56 am »
HI
I use to set RUN as ADMINISTRATOR the Qb64.exe and to set in the whitelist of antivirus the QB64 folder and its subfolders

I haven't  got any issue with exe compiled

« Last Edit: March 30, 2021, 05:15:57 am by TempodiBasic »
Programming isn't difficult, only it's  consuming time and coffee