is this program safe?

[Guest zaauriel]

Hello, i need a little help.

I have this program writen by Eohelper. Its an auto-loger for an online game called Endless.

Since it requires u to input your user name and password, i want to make sure that its safe and my account wont get hacked.

My question is:

Does this program sends any kind of information over the internet?

and

Can this information be used to hack my game account?

Thank you very much.

exeo.zip

[layer]

My AntiVir automatically detected the EXE file as THIS:

C:\DOCUME~1\MYNAME~1\LOCALS~1\TEMP\TEMPORARY INTERNET FILES\CONTENT.IE5\CW3QQN6R\EXEO[1]\EXEO.EXE

Is the Trojan horse TR/Click.Small.HT

It could be false though... But all of my other AutoIt EXE's are never detected as trojans or anything. I haven't looked over the script yet, I just breezed through it and it looks harmless, just DO NOT RUN THE EXE until someone has verified it is safe.

Any other AutoIt created EXE I download, has never returned as a trojan... So this must be different. Just don't run it until someone else can verify the file.

Edited August 30, 2005 by layer

[w0uter]

the .au3 (witch is the source) looks clean.

compile that yourself instead of using the supplied .exe

better safe then hacked

[JSThePatriot]

The .au3 is safe. I went through the whole thing. Just compile it yourself. You may want to warn the guy, that his .exe is trojaned. I was unable to scan it, but I am sure something could be up if Layer is getting a bad reading on it. I will see if I can scan it later when I am on Windows.

JS

[LxP]

No virus reported here using a fully updated copy of AVG Free.

[Xenobiologist]

Hi,

I had also a problem with Norman Virus Control. Norman detected a Trojan in my AutoIt scripts. I sent them the files. They released a new version. I don´t know why, but sometimes the antivirus companies have problems with such scripts and then they are producing FPs. (FP = false positives)

So long,

Mega

[/dev/null]

I don´t know why, but sometimes the antivirus companies have problems with such scripts and then they are producing FPs. (FP = false positives)

That's most probably due to the use of upx which some trojans and viruses seem to be using as well. After decompressing the file with upx -d, there is usually no more virus/trojan warning (however, the compiled script won't run then!)

Cheers

Kurt

[layer]

Well, I'm not saying that all of my AutoIt scripts or AutoIt compiled .EXE's are detected as trojans... This was seriously the only AutoIt compiled EXE that has ever been detected as a trojan.. I don't know if it was the compression, or if it's even AutoIt, but whatever it is, it probably isn't safe... I could be wrong but the best thing to do is to not run it and just compile the script that came with it as your own .EXE...

[Guest zaauriel]

thanks for you time everybody.

Oh, about the trojan stuff, its not the author fault, i compiled the script myself and run antivirus before ziping.

I didnt get any warning, so i post it like that (i used updated norton antivirus).

Thanks again, u really helped me a lot.

[Guest DunkelWolf]

My AntiVir automatically detected the EXE file as THIS:

It could be false though... But all of my other AutoIt EXE's are never detected as trojans or anything. I haven't looked over the script yet, I just breezed through it and it looks harmless, just DO NOT RUN THE EXE until someone has verified it is safe.

Any other AutoIt created EXE I download, has never returned as a trojan... So this must be different.   Just don't run it until someone else can verify the file.

<{POST_SNAPBACK}>

Hi layer,

AntiVir detects it as Trojan, thats right, but it even detects it as trojan if you compile the harmless code yourself so its a fault of antivir itself.. false alarm.

Just try it and compile it yourself.

DunkelWolf