Virus warning: "Suspicous behav." when installing BirdieSync

If BirdieSync 2.x constantly replaces your girlfriend's photo with your mother's one, this forum is for you...
Post Reply
DBird
Posts: 2
Joined: Fri Sep 21, 2012 6:15 pm

Virus warning: "Suspicous behav." when installing BirdieSync

Post by DBird »

Hello,

I know this it not new, but obviously it hasn't changed over the past years: Some virus scanners tend to warn or block BirdieSync.
http://www.birdiesync.com/forum/viewtopic.php?f=2&t=241
http://www.birdiesync.com/forum/viewtop ... f=2&t=1054
http://www.birdiesync.com/forum/viewtopic.php?f=2&t=114
http://www.birdiesync.com/forum/viewtop ... f=6&t=1764

In my case, the current version of Avira Antivir Premium detected "suspicious behaviour" of BirdieSyncSetup.exe - so not in a file scan (as virustotal.com), but when surveying what the running programm does. Unfortunately Antivir leaves me without further information what is meant by "suspicious".

Birdy, might this should still stem from a library you include, as mentionded in one of the older threads above?
Or does your installer anything uncommon you could prevent? I don't know, e.g. writing to uncommon directories or registry entries?

I don't think BirdieSync is malware, but there is a bad feeling to simple ignore this and click "OK"... :?

Birdy
Site Admin
Posts: 3118
Joined: Tue Apr 18, 2006 11:43 am
Contact:

Re: Virus warning: "Suspicous behav." when installing Birdie

Post by Birdy »

Hello DBird,

The problem is that each time BirdieSync is considered as a false positive by anti-virus, it's for different reasons (a dll, an exe, the setup file, ...). To be honest with you I don't know exactly the reason in each case. These anti-virus editors use heuristics which by definition can make errors of detection... And I guess that since usually these errors are automatically corrected by software anti-virus, other softwares than BirdieSync are impacted as well by these false detections.

BirdieSync setup file doesn't do any unauthorized operations. It accesses registry for very common operations like checking if a runtime package is already installed or automatically starts BirdieSync at login.
Would you have more details about the "suspected behavior" of the installer detected by Avira Antivir Premium ? Maybe that could help.
Thanks.
Birdy

DBird
Posts: 2
Joined: Fri Sep 21, 2012 6:15 pm

Re: Virus warning: "Suspicous behav." when installing Birdie

Post by DBird »

Hello Birdy,

as Avira doesn't offer a clear information what would seem "suspicious", I have uploaded the BirdieSync installer to Avira as "false positive". Unfortunately, I didn't get an answer though I asked twice.

Post Reply