SharpDevelop Community

Whenever I download the executable of sharp develop AVG gives me a Trojan warning from Downloader.Zlob.AOG . Is this supposed to happen or is that not legitimate?

As you can see from other posts in this forum, only AVG gives a false positive - it seems to find some issue with the NSIS installer. This has been reported before, but no action has yet been taken by the AVG developers as it seems.

Currently, we recommend to either ignore the warning or use another virus scanner.

The #develop installer does not contain any malware. If you are still troubled, download the source code and build #develop yourself.

Sorry for asking about something that had previously been answered. I thought I had searched for the topic, but I guess I didn't do it correctly. I was pretty sure #develop didn't contain any malware, I was trying to see if maybe another program was trying to exploit some loophole. Thanks for the help though!

I have another issue now. When I click on the setup executable file windows gives me an error message saying windows cannot access the file and that I may not have the correct permission to access the item. I have the admin account for this computer and no one else uses it, so I technically should have all the permissions. Is there something else I need to look at?

Maybe your virus scanner has locked the file?

In the worst case, you can download the source code and build your very own executable. The setup isn't really necessary. Instructions can be found in the wiki.

I downloaded the source code and followed the wiki (after getting several strange errors like, selecting where to download the files and windows telling me that the selected memory location didn't exist (?)). After clean.bat I ran debugbuild.bat, which did it's thing, but closed suddenly after displaying some text in yellow (maybe a bad thing?) too quickly for me to read what it said. I thought it was done, but the executable was nowhere to be found. There's something strange going on with permissions and I've never had this happen before. I made sure to turn off AVG and my firewall (just in case) while I was downloading and installing the software. I also had trouble deleting the zipped folder b/c it said I didn't have permission. I went to another folder, came back, and the folder was gone. Could my antivirus be messing up my installation even after I turned it off? This is very strange.

The yellow lines scrolling by usually are compiler warnings. If you want to read the warnings and messages emitted, run the build from a command prompt window.

If you are using the source code from svn, go to the src folder and run 'releasebuild.bat'. That usually works for me.

It is indeed possible that a virus scanner can mangle files. I spent the better part of yesterday morning repairing the damage a virus scanner (ok, it was a beta version) had done to my system disk.

F-Secure 6.00.169 reports that uninst.exe contains the trojan "Trojan-Downloader.Win32.Zlob.uk" with an up-to-date virus definition database downloaded today (June 21th), so it's not only AVG that is giving these warnings.

Dag

Honestly, does SharpDevelop contain any type of unwanted files - such as adware? Spyware, things like that? You might not include it in the source file you allow us to download.

gekotec:

Honestly, does SharpDevelop contain any type of unwanted files - such as adware? Spyware, things like that? You might not include it in the source file you allow us to download.

No, SharpDevelop is Open Source. You can get the source code version of SharpDevelop and read the source code if you want. You just have to double-click a .bat file and everything will be compiled from source.
The antivirus software is probably complaining about some random byte sequence in the compressed setup, so compiling from source or getting a different setup version from http://build.sharpdevelop.net/BuildArtefacts/ should keep it quiet.

I harbour the suspicion the uncompress routine used by the setup is the culprit. It seems that some virus scanners assume that self extracting archives in a setup package are always A Bad Thing (tm).

And what does your virus scanner say *after* installation?

This *was* after installation. F-secure triggered on C:\Program Files\SharpDevelop\2.0\uninst.exe. I checked with Bitdefender 8 and the scanners at http://virusscan.jotti.org, but none of them detected anything in uninst.exe or the installer (SharpDevelop2_2.0.0.1462RC2_Setup.exe). F-secure didn't prevent me downloading the installer, but I didn't keep the file and haven't scanned it manually.

Don't get it wrong, I would of course *never* suspect sharpdevelop to include a virus. Just wanted to let you know in case other users get the same result and checks this forum.

Dag

As a programming idiot I do not expect to be able to add much to this thread but I have experienced similar problems:

* My anti-virus software found and deleted uninst.exe because of a suspected dropper.

* Since installing #d I have had my (Dad's) computer crash unexpectedly on me a couple of times.

As a precaution I'd like to uninstall #d now, despite the truly excellent impression I gained of the application.

But I have deleted uninst.exe!!

Can anyone suggest a way forward for me?

The first few ways that sprang to mind (I'm assuming you've got SharpDevelop2 installed - the process will be similar with SharpDevelop 1.1):

1) Get somebody to send you uninst.exe for the version you installed. Turn off the virus scanner and uninstall SharpDevelop in the normal way.

2) Turn off the virus scanner and reinstall SharpDevelop over the top of an existing installation. You will need to remove a registry key as explained in another post. Then uninstall everything.

3) Manual uninstallation. Be careful with the registry deletion.

Run the PreUninstallTasks.bat (in folder bin\setup).

Remove the registry keys using RegEdit:

HKey_Local_Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SharpDevelop2

HKey_Local_Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SharpDevelop.exe

SharpDevelop adds some file assocations which can optionally be removed:

HKey_Classes_Root\SD.cmbxfile

HKey_Classes_Root\SD.prjxfile

HKey_Classes_Root\SD.slnfile

HKey_Classes_Root\SD.csprojfile

HKey_Classes_Root\SD.xfrmfile

HKey_Classes_Root\SD.vbprojfile

HKey_Classes_Root\SD.sdaddinfile

HKey_Classes_Root\SD.booprojfile

4) Remove installed SharpDevelop files.

5) Remove the SharpDevelop shortcuts added to the desktop and Start - Programs - SharpDevelop.

That should be everything. It might be a good idea to make a backup of the registry so you don't hose your machine. You could probably get away with just removing the Uninstall\SharpDevelop2 registry key and removing the installed SharpDevelop files, if you don't mind leaving behind a few registry settings.

 

This is a very late reply Matt, in case you follow this. Thanks very much for your advice.

I chose the second option, but decided to take the opportunity to learn what a registry key was etc, hence the delay.

I backed up the key, using regedit, then removed it by simply using add/remove programs. Next I reinstalled then uninstalled #d2. For whatever reason this seems to have cure my Dad's computer of its fondness for crashing. I blame internet explorer but that's only because it's fun to blame IE for everything.

Thanks again