Reason behind why compiled 32-bit .exe are AV flagged but not 64-bit

[MarkIT]

Hi AutoIT Masters,

Sorry again but Just want to know if you have any idea why the AutoIT scripts converted into 32-bit.exe files are being deleted by AV but not 64-bit.exe. If we raise it to the AV whitelisting, they come back saying it is false positive.

I disabled AV and everything goes well.

OS: Windows 10 - 64 bit

AV: Symantec

Thanks for the help.

Edited January 18, 2020 by Melba23
Alterred thread title

[TheXman]

  On 1/16/2020 at 3:12 PM, MarkIT said:

have any idea why the AutoIT scripts converted into 32-bit.exe files are being deleted by AV

Expand  

Are you using UPX program compression?

#AutoIt3Wrapper_UseUpx=Y

 

Edited January 16, 2020 by TheXman

[jpm]

same thing occured to me with Windefender and no UPX.

I hope Jon see this post and can give us some high lights

[mLipok]

@MarkIT please open a ticket here:
https://www.autoitscript.com/trac/autoit/timeline

 

[MarkIT]

  On 1/16/2020 at 7:00 PM, TheXman said:

Are you using UPX program compression?

#AutoIt3Wrapper_UseUpx=Y

 

Expand  

No, I don't. I use the Aut2exe program to convert it to .exe. Thanks again for your response.

[MarkIT]

  On 1/17/2020 at 8:33 AM, mLipok said:

@MarkIT please open a ticket here:
https://www.autoitscript.com/trac/autoit/timeline

 

Expand  

Thanks a lot @mLipok, I will raise a ticket

[Andreik]

Your title is misleading, it has nothing to do with your question.

[Melba23]

MarkIT,

As I posted when closing your completely unnecessary (although I know you were pointed there) Trac ticket - it is nothing to do with an AutoIt bug. If Symantec already agree it is a false positive then ask them to change their algorithm to prevent it being flagged - that has worked for me with other AV providers in the past.

Thread locked.

M23