• AVR Freaks

Hot!Do XC16 1.36 executables have a virus/trojan?

Page: 12 > Showing page 1 of 2
Author
RDS Cliff
Junior Member
  • Total Posts : 57
  • Reward points : 0
  • Joined: 2016/09/23 11:50:05
  • Location: 0
  • Status: offline
2019/01/20 16:35:53 (permalink)
5 (1)

Do XC16 1.36 executables have a virus/trojan?

Just tried installing XC16 on a new computer and my antivirus (Bitdefender) says there is a trojan in the .exe files.
 
Went to the XC compiler download page to re-download the installation program in case I had a bad copy and it looks like the XC16 installation program was pulled.  XC8 and XC32 are there but no XC16.
#1

26 Replies Related Threads

    d.
    Junior Member
    • Total Posts : 113
    • Reward points : 0
    • Joined: 2009/08/05 00:10:47
    • Location: 0
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/20 22:57:09 (permalink)
    0
    I installed it weeks ago and my antivirus didn't complain.
     
    I also noticed that the Mac install file is also missing.  Not likely it would also be pulled due to a virus.
     
    Mysteriouser and mysteriouser...
     
    d.
    #2
    du00000001
    Just Some Member
    • Total Posts : 2774
    • Reward points : 0
    • Joined: 2016/05/03 13:52:42
    • Location: Germany
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/21 02:02:22 (permalink)
    0
    The release notes are missing as well. Might be Microchip is preparing an update. Or what we see is a mix from several machines, one being currently down.

    PEBKAC / EBKAC / POBCAK / PICNIC (eventually see en.wikipedia.org)
    #3
    Gerald1
    Super Member
    • Total Posts : 338
    • Reward points : 0
    • Joined: 2009/05/12 06:50:37
    • Location: Wien, Austria
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/21 05:48:21 (permalink)
    +1 (1)
    RDS Cliff
    Just tried installing XC16 on a new computer and my antivirus (Bitdefender) says there is a trojan in the .exe files.
     
    Went to the XC compiler download page to re-download the installation program in case I had a bad copy and it looks like the XC16 installation program was pulled.  XC8 and XC32 are there but no XC16.


    I downloaded the XC 16bit compiler on Dec. 17, 2018 via a direct link over the RSS feeds and installed it last week.
    There was no problem at the time. My virus scanner didn't roar.
    Yes, the release notes were also missing.
    Yes, this morning I searched for microchip websites, but the 16-bit XC compilers are not online.
    Hmmm….
    Microchip publish it's new websites since few days or weeks.
    Maybe Microchip have realised that the compiler was infected and verifies it now.
     
    Best Regards
    Gerald
    ---
     
     
     
     

    SG
    ---
    Daily the PC greets:
    "Press Enter!"; "Coward!"
    ---

    #4
    ricmorr
    New Member
    • Total Posts : 1
    • Reward points : 0
    • Joined: 2018/02/19 04:35:21
    • Location: 0
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/21 05:53:12 (permalink)
    +1 (1)
    My virus scanner picked up a virus (and deleted the executable) in 1.36 this morning as I was compiling a project. 
     
    Luckily I still had 1.33 installed and was able to compile the project using that.
    #5
    jfd
    Administrator
    • Total Posts : 24
    • Reward points : 23
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/21 09:11:25 (permalink)
    +3 (3)
    Hi All,
     
    There are various false positives that periodically trigger virus checkers. We take precautions to ensure that all files are clean and stay clean (We generate SHA-256 hashes on every executable and check them at install to ensure they are not corrupted in the interim. We have an installation manifest and ensure that we install only the files, and all of the files, that we intend to install.) We will triple check, but this is most likely a false positive.
     
    XC16 v1.36 was not pulled because it was infected. We discovered a very peculiar corner case that would silently generate bad code (our cardinal sin). It is very unlikely that others will stumble across this bug, but we take the quality of the compiler very seriously and pulled it rather than rely on its peculiarity to limit exposure. We're working on a solution for that and will highly recommend the repaired compiler to everyone, regardless. (For background, we run nearly a million (literally) automated test cases on every compiler build and countless manual test. This is a new one on us and will spawn new test cases to cover every permutation.)
     
    Best,
    jfd
    #6
    rodims
    Super Member
    • Total Posts : 1490
    • Reward points : 0
    • Joined: 2009/02/10 11:08:59
    • Location: 51.9627, 7.6262
    • Status: online
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/21 09:22:15 (permalink)
    +1 (1)
    Maybe Microchip have realised that the compiler was infected and verifies it now.

    Yes, at least they detected a problem, but as often they do not communicate.
     And ricmirror's post shows that there IS a problem.
     
    I installed xc16 1.36  on 28. Dec and the integrated Microsoft Windows 10 Defender did never alert so far.
    However I now uploaded bin\xc16-gcc.exe and xc16-ld.exe and they show an alert for 20 of 70 virus scanners !
    (same files from xc16  1.35 show only one alert, I think that can be considere a false alert)
     
    Theoretically even 20 alerts still can be false alerts, but even then it is definitely way too much to release such a version. Apparently Microchip did not check the binaries which they create. Neither real nor false alert,- it's not acceptable.
     
    Just silently removing that version from the download page is not the kind of customer care I would expect from Microchip.

    I think the link below should directly show you the scan results; as said, 20 of 70 scanners consider the file to be harmful.
     
    Even Microsoft shows the file as infected, but since it is not known which scan parameters they use in virus total, this does not tell much, if Windows 10 itself does not show an alert. 
     
    [edit: no idea why, but meanwhile  another one checked this file and this link shows a different result (10 of 69). Should not happen because of the hash values, but who knows]
    https://www.virustotal.co...af9fad18d91a/detection
     
    I will definitely not continue to use that version.
    post edited by rodims - 2019/02/02 04:12:43
    #7
    rodims
    Super Member
    • Total Posts : 1490
    • Reward points : 0
    • Joined: 2009/02/10 11:08:59
    • Location: 51.9627, 7.6262
    • Status: online
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/21 09:25:22 (permalink)
    0
    XC16 v1.36 was not pulled because it was infected. We discovered a very peculiar corner case that would silently generate bad code (our cardinal sin).

     
    Ok, there is the awaited comment from Microchip. Thanks for that, but I'm not convinced.
    #8
    cawilkie
    Administrator
    • Total Posts : 1977
    • Reward points : 0
    • Joined: 2003/11/07 12:49:11
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/21 10:40:20 (permalink)
    +6 (6)
    Further investigation for the 'Virus' question has shown that some virus checkers (VirusTotal is mentioned in this article: https://www.csoonline.com/article/3216765/security/heres-why-the-scanners-on-virustotal-flagged-hello-world-as-harmful.html) provide false positives when debug information is left in.
     
    It is our normal practice to strip debug information, although it is harmless, from our release binaries before creating installers and releasing them to the web.   This was not done with v1.36; when we strip the executables and re-submit them to 'VirusTotal', the executables no longer are flagged as having potential trojans.
     
    As 'JFD' mentions, above, XC16 v1.36 was pulled for a corner case where bad code is silently generated.  We are currently working on a fix, including additional testing for this corner case, and will release a patch as soon as possible.   More information about this particular error will provided once we are sure of a root understanding for the problem.
     
    Regards
    Calum
    #9
    FirmwareStudent
    New Member
    • Total Posts : 2
    • Reward points : 0
    • Joined: 2019/01/20 18:33:30
    • Location: 0
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/22 19:02:44 (permalink)
    +1 (1)
    Thanks for this post. I'd been encountering an issue where the "X16-GCC.exe" file would be deleted as soon as I attempted to compile, and I had no clue why. It turns out McAfee (courtesy of the Dell factory) had been deleting  it without telling me every time I'd tried to compile after reinstalling MPLAB and/or XC16.
     
    EDIT: I had to disable McAfee LiveSafe Real-time Scanning. Then I had to uninstall XC16 and MPLAB completely (all directories). McAfee had deleted multiple executables in the MPLAB directories. Now everything works. Just another case of Virus Software causing problems, I suppose.
    post edited by FirmwareStudent - 2019/01/22 20:07:36
    #10
    du00000001
    Just Some Member
    • Total Posts : 2774
    • Reward points : 0
    • Joined: 2016/05/03 13:52:42
    • Location: Germany
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/23 08:41:03 (permalink)
    +4 (4)
    FirmwareStudent
    .... Just another case of Virus Software causing problems, I suppose.

    • Virus software always creates problems.
    • Antivirus software sometimes creates problems.
    I prefer the latter  Smile

    PEBKAC / EBKAC / POBCAK / PICNIC (eventually see en.wikipedia.org)
    #11
    NorthGuy
    Super Member
    • Total Posts : 5481
    • Reward points : 0
    • Joined: 2014/02/23 14:23:23
    • Location: Northern Canada
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/23 09:38:41 (permalink)
    +2 (2)
    du00000001
     
    • Virus software always creates problems.
    • Antivirus software sometimes creates problems.




     
    I think it's the other way around:
     
    - Antivirus software is always there to cause problems
    - Viruses only cause problems when your PC is infected
     
    #12
    MBedder
    Circuit breaker
    • Total Posts : 6767
    • Reward points : 0
    • Joined: 2008/05/30 11:24:01
    • Location: Zelenograd, Russia
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/23 13:13:58 (permalink)
    0
    Hmm... what are viruses and antiviruses? Is this same funny stuff I recall from early 1990s when I first and last time used something like aidstest.exe? LoL
    #13
    du00000001
    Just Some Member
    • Total Posts : 2774
    • Reward points : 0
    • Joined: 2016/05/03 13:52:42
    • Location: Germany
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/23 14:24:53 (permalink)
    0
    If aidstest.exe is consideren some antivirus software,
    aidstest.exe : Kasperski = Katjuscha : Saturn 5
    But basically you got it  Smile

    PEBKAC / EBKAC / POBCAK / PICNIC (eventually see en.wikipedia.org)
    #14
    MBedder
    Circuit breaker
    • Total Posts : 6767
    • Reward points : 0
    • Joined: 2008/05/30 11:24:01
    • Location: Zelenograd, Russia
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/23 14:31:07 (permalink)
    0
    My point there was that I've never used ANY antivirus software since then and thus never had any issues like those mentioned above.
    #15
    FirmwareStudent
    New Member
    • Total Posts : 2
    • Reward points : 0
    • Joined: 2019/01/20 18:33:30
    • Location: 0
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/23 16:50:31 (permalink)
    0
    I'm in a lab at the moment, and the entire lab class is having issues with compiling now. This includes personal computers and lab computers alike. Many of the systems do not have virus software installed, and clearly still have the various .EXEs in the bin folder. Not sure what is happening with Microchip.
    #16
    Jim Nickerson
    User 452
    • Total Posts : 6020
    • Reward points : 0
    • Joined: 2003/11/07 12:35:10
    • Location: San Diego, CA
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/23 17:16:03 (permalink)
    +2 (2)
    Years ago I had McAfee , I noticed my computers slowing down.
    Turned out one PC was scanning all the networked PC's.
    I contacted McAfee, to no avail.
    I removed McAfee from all, had to use some special software from McAfee as they installed as a root kit.
    I went to Microsoft Defender.
    I still have to tell defender not to scan my Microchip dirs. and the output work dirs.
    Every once in a while I "in advertently " download something that Defender flags...
    #17
    Gort2015
    Klaatu Barada Nikto
    • Total Posts : 3122
    • Reward points : 0
    • Joined: 2015/04/30 10:49:57
    • Location: 0
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/30 20:57:57 (permalink)
    +1 (1)
    The good old days, when programming was more fun.
    You bought PC World magazine, learnt how to do division and multiply in binary, when you thought a nipple nibble was part of the Female anatomy.
     
    Wrote Space Invaders by hand in assembly lanugage, I think it was a Nascom or variation and the only way to enter it was one hex value at a time.  The good old 6502, Z80 and 68K days.
     
    converted each assembly language instruction to machine code and typed in the hex values that I got fast at.  Took a lot of time and I hoped for success.
     
    My first computer didn't even have a display out, just single line of 15segment leds and a hex keypad + extra buttons.
     
    I only got that because my Father new someone who repaired Arcade machines.  He had a lab, there were loads of Arcade Motherboards + draws full of logic chips.  Little black boxes.
     
    My story.
     
     
     

    MPLab X playing up, bug in your code? Nevermind, Star Trek:Discovery will be with us soon.
    https://www.youtube.com/watch?v=Iu1qa8N2ID0
    + ST:Continues, "What Ships are Made for", Q's back.
    #18
    Howard Long
    Super Member
    • Total Posts : 676
    • Reward points : 0
    • Joined: 2005/04/04 08:50:32
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/31 01:35:11 (permalink)
    +1 (1)
    Gort2015
    My first computer didn't even have a display out, just single line of 15segment leds and a hex keypad + extra buttons.

     
    Sheer luxury! Mine had the hex keypad, but only 20 discrete LEDs, none of this new fangled 7 or even 15 segment LED nonsense. There was no PCB, it was hand wired, with 256 bytes of OTP ROM, 1k of RAM (8 x 2102) and about 25 assorted TTL standard 74 series support chips, not even 74LS.
     
    I was 12 or 13, and it was paid for by delivering newspapers.
     
    I didn't write down the assembler mnemonics, just the machine code: I had the entire instruction set in hex sitting in my head. Programs were written down directly in hex. It was probably the best grounding I could ever have had.
     
    #19
    Aussie Susan
    Super Member
    • Total Posts : 3584
    • Reward points : 0
    • Joined: 2008/08/18 22:20:40
    • Location: Melbourne, Australia
    • Status: offline
    Re: Do XC16 1.36 executables have a virus/trojan? 2019/01/31 19:16:09 (permalink)
    +1 (1)
    Howard - You must be about the same age as me. 
    COSMAC 1802 with multiple switches and LEDs and a few push-buttons.
    Even managed to toggle in a small program that used an NE555 to convert a serial stream to tones to record on a cassette recorder. The NE555 also used to decode the tones back to a serial stream (occasionally anyway).
    The COSMAC was great because you could drop to clock to 0Hz (the whole chip was static CMOS) or use a push-button to enter each of the 8 (or 16) clock pulses for each instructions and watch the effect on the pins as the internal hardware (none of this microcode for us!) executed of them.
    As for the assembler codes, I worked on a PDP-11/70 for a number of years and I can still remember many of the octal codes. I used to be able to read the octal memory outputs pretty much straight off!
    Kids these days........
    Susan
    #20
    Page: 12 > Showing page 1 of 2
    Jump to:
    © 2019 APG vNext Commercial Version 4.5