Jump to content

Au3toCmd -- Avoid false virus positives. (Version: 2022.09.01)

Recommended Posts

  • Replies 160
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Popular Posts

Au3toCmd  ---  Avoid false virus positives Since many virus scanners sometimes prevent a "compiled autoit EXE" from being executed as "false positive", the "*.A3X" format is a suitable format to

I fully agree with @argumentum ! @bartmon2005 : Your ass is safe, but your index finger was not capable to click the Thanks button - that's pathetic ! @Exit is a well-known member o

New version in first post Version: 2022.07.22 - Support scripts with the same name but different content in different directories.  

Posted Images

Hi all members when i run the au3tocmd program everything works fine but I have a question: if you select an exe file with icon you can somehow get the icon from the exe file that was previously selected and then when you will create shortcut so the exe file icon appears in the cmd shortcut?

Link to post
Share on other sites

I just uploaded a new version that takes @Borje's request into account.
If there is an associated * .ico file or an icon in the * .exe source file, this icon is used in the link.
Furthermore, a ZIP file can now also be created in Windows 7, provided that at least Powershell 5.0 was additionally installed.

@Borje: Can you please test the new features 😀

App: Au3toCmd              UDF: _SingleScript()                             

Link to post
Share on other sites
  • 1 month later...
  • 2 months later...

Sorry for the rookie confusion here, but here goes...

In my current test project using Java Selenium, when I run it locally from Eclipse, I start the browser by providing my application URL, and then run auth.exe in order to respond to a Windows NTLM login prompt.  Everything works fine so far, but based on what I am reading and hearing, it sounds like I can anticipate running into this "false positive" antivirus issue when I go to operationalize my test with Github, Bamboo/Azure, and Saucelabs.

I copied the script text from these posts into my Au3toCmd.au3 file.  I now have the following files in my project folder and I just now installed Autoit3 to my computer.  Where do I navigate to, and which command(s) do I issue to, generate the .cmd file?  And then in my test, what file do I run in place of the current auth.exe to respond the Windows login?

Thanks very much.  This script From Exit looks like a winner !


Directory of C:\Users\my-user-info\git\my-test-folder\src\main\resources\autoit

06/15/2020  03:02 PM    <DIR>          .
06/15/2020  03:02 PM    <DIR>          ..
06/15/2020  03:05 PM             7,519    Au3toCmd.au3
02/21/2020  03:04 PM               190     auth.au3
02/21/2020  03:04 PM           866,304 auth.exe
02/21/2020  03:04 PM                48      setvalue.au3
02/21/2020  03:04 PM           865,792 setvalue.exe
               5 File(s)      1,739,853 bytes
               2 Dir(s)  19,080,040,448 bytes free

Link to post
Share on other sites
  • 3 weeks later...

Windows PowerShell
Copyright (C) 2016 Microsoft Corporation. All rights reserved.

PS C:\Users\Börje> Powershell Compress-Archive -?


    Compress-Archive [-Path] <string[]> [-DestinationPath] <string> [-CompressionLevel {Optimal | NoCompression | Faste
    st}] [-WhatIf] [-Confirm]  [<CommonParameters>]

    Compress-Archive [-Path] <string[]> [-DestinationPath] <string> -Update [-CompressionLevel {Optimal | NoCompression
     | Fastest}] [-WhatIf] [-Confirm]  [<CommonParameters>]

    Compress-Archive [-Path] <string[]> [-DestinationPath] <string> -Force [-CompressionLevel {Optimal | NoCompression
    | Fastest}] [-WhatIf] [-Confirm]  [<CommonParameters>]

    Compress-Archive [-DestinationPath] <string> -LiteralPath <string[]> -Update [-CompressionLevel {Optimal | NoCompre
    ssion | Fastest}] [-WhatIf] [-Confirm]  [<CommonParameters>]

    Compress-Archive [-DestinationPath] <string> -LiteralPath <string[]> -Force [-CompressionLevel {Optimal | NoCompres
    sion | Fastest}] [-WhatIf] [-Confirm]  [<CommonParameters>]

    Compress-Archive [-DestinationPath] <string> -LiteralPath <string[]> [-CompressionLevel {Optimal | NoCompression |
    Fastest}] [-WhatIf] [-Confirm]  [<CommonParameters>]


    Get-Help cannot find the Help files for this cmdlet on this computer. It is displaying only partial help.
        -- To download and install Help files for the module that includes this cmdlet, use Update-Help.
        -- To view the Help topic for this cmdlet online, type: "Get-Help Compress-Archive -Online" or
           go to http://go.microsoft.com/fwlink/?LinkID=393252.


Link to post
Share on other sites

It is usually a bad idea to use the filesystem outside of your own user directory.
In your case, Powershell was installed correctly, but had no authorization to write to "undetect".
The error message is therefore misleading.
Let's see what I can do there.

App: Au3toCmd              UDF: _SingleScript()                             

Link to post
Share on other sites
  • Exit changed the title to Au3toCmd -- Avoid false virus positives. (Version: 2022.09.01)

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

  • Similar Content

    • By Exit
      For my next project I would like to send files with "alternate data streams" by email in ZIP format.
      I can not use any external program like 7-Zip or WinRAR. (They would fit😥)
      Who knows how to create a ZIP file with "alternate data streams" included with the Powershell command "Compress-Archive"? 
      Here a test script:  (save as "ADSTester.cmd")
      @rem Try to create a zip file with alternate data streams (ADS) included @rem Housekeeping @cls @del ADSTester.zip >nul: @RD /S /Q Extracted >nul: @del ADSTester.txt >nul: @rem End of Housekeeping echo This is the ADSTester.txt file >ADSTester.txt echo This is the ADSTester.txt:Part1 file >ADSTester.txt:Part1 echo This is the ADSTester.txt:Part2 file >ADSTester.txt:Part2 dir /r ADSTester.txt @rem See the 3 files @rem **************************************************************** @rem **************************************************************** @rem Please alter the next lines to include the alternate data streams. powershell Compress-Archive -Path .\ADSTester.txt -Update -DestinationPath ADSTester.zip powershell Expand-Archive -Path ADSTester.zip -DestinationPath .\Extracted\ dir /r Extracted\ADSTester.txt @rem Only one file left :-( pause  
    • By MarkIT
      Hi AutoIT masters,
      Good day! Sorry to have bothered this forum but we really need help. We are working on an automation project that is running on VDI server. The BOTS are in .exe are running fine until AV detected them and deleted the files. The files were re-compiled and AV kept on deleting them. The copy of the .exe BOT deleted were sent to Symantec for whitelisting. After whitelisting, it is no longer deleted but no longer working as designed (showing Line script error). We checked the scripts and there were no issues since we run it using SciTE editor and it performed the desired task. Good thing we found on this thread the solution using .a3x and the BOTS worked fine and no longer deleted. Now, the problem is they are asking why the BOTS won't run in .EXE and what is the reason behind Symantec AV deleting them. We raised a case with Symantec but they cannot provide further information as they are always seeing the file as "False Positive". We even tested with Symantec turned off and those .EXE files are working fine, however, after re-enabling, it got deleted.
      Just seeking help on how to better convince them that it is really Symantec causing the issue and the .a3x file.
    • By ambad4u
      Greetings to all,
      This may relate in regards to
      My question:
      If I have 2 different au3 scripts compiled individually as a standalone executable(s) (compilation settings are the same)
      If I have one au3 script compiled as a standalone executable(s) with different compilation settings.
      Does an Anti Virus see them as one signature for all? or treated as unique signatures?
      My reason behind this is that I am trying to plan ahead on how to deal with these false positives.
      I am a part of a small IT admin team that would like to automate some repeatable tasks using Autoit.
      Our AV is Sophos if one is curious.
      Any insights are highly appreciated!, many thanks in advance!
    • By BigDaddyO
      I've recently been getting hammered by Symantec SEP deleting all of my compiled scripts so I'm trying to figure out how I could run my scripts uncompiled.
      Problem is, these scripts are typically launched from inside Citrix sessions that I don't have control of so I can't install AutoIT in there to get all the #Include files that my scripts are using.
      I tried to use AU3Stripper and while, yes that did create a single file and I could run it. it put it in a state that I couldn't easily maintain going forward.
      Is there any existing way to pull all the functions and drop them at the end of the main script?  Not sure about the Globals and Constants though, I guess they would have to go to the top which shoves everything else down.  I also need to maintain the current script spacing and comments as I often have to update older scripts and need the comments to help with that.
    • By RichardL
      Local $sAxName Local $oMSComm $sAxName = "MSCOMMLib.MSComm.1" $oMSComm = ObjCreate($sAxName) MsgBox(0, Default, StringFormat("Name: %s, Obj %d, Err %d", $sAxName, IsObj($oMSComm), @error)) I'm talking to serial ports (for Arduino) using the MSComm object.  It all runs fine from SciTE or .exe.  If I compile to .a3x the object is not created.  I could manage without .a3x but I like it because it compiles faster.
  • Create New...