EBak Posted March 8, 2006 Share Posted March 8, 2006 Hi, Since the update of Mcafee on 3 March 2006 all my executables that I did create with AutoIt are detected as a virus/Joke. Is anyone else has this problem and what can I do about it? regards, Emile Link to comment Share on other sites More sharing options...
MadBoy Posted March 8, 2006 Share Posted March 8, 2006 Hi,Since the update of Mcafee on 3 March 2006 all my executables that I did create with AutoIt are detected as a virus/Joke. Is anyone else has this problem and what can I do about it?regards,Emilewrite Mcafee about it. ANd tell them to change their attitude towards autoit. Only way i guess. If you search for 'antivirus' in this forum you will get lots of posts like that. My little company: Evotec (PL version: Evotec) Link to comment Share on other sites More sharing options...
jpm Posted March 8, 2006 Share Posted March 8, 2006 Hi,Since the update of Mcafee on 3 March 2006 all my executables that I did create with AutoIt are detected as a virus/Joke. Is anyone else has this problem and what can I do about it?regards,EmileI agree with MadBoy you should write to McAfee.I was just curious to understand with which version of AutoIt the executables were produced. Link to comment Share on other sites More sharing options...
tonedeaf Posted March 8, 2006 Share Posted March 8, 2006 I did a quick check on my scripts folder. It did not find any viruses.The virus definitions are of 7th March. Link to comment Share on other sites More sharing options...
PartyPooper Posted March 9, 2006 Share Posted March 9, 2006 Hi,Since the update of Mcafee on 3 March 2006 all my executables that I did create with AutoIt are detected as a virus/Joke. Is anyone else has this problem and what can I do about it?regards,EmilePost an example so we can check to see if other virus scanners also note it as a virus. Link to comment Share on other sites More sharing options...
jpm Posted March 9, 2006 Share Posted March 9, 2006 Post an example so we can check to see if other virus scanners also note it as a virus.don't forget to describe which which release of AutoIT they were produced. Thanks Link to comment Share on other sites More sharing options...
thorus Posted March 9, 2006 Share Posted March 9, 2006 Or you could stop using McAfee Antivirus and try another. I use AVG Professional. Link to comment Share on other sites More sharing options...
ChrisL Posted March 9, 2006 Share Posted March 9, 2006 Or you could stop using McAfee Antivirus and try another.I use AVG Professional. Sometimes just as bad AVG has removed some of my compiled scripts on my home PC [u]Scripts[/u]Minimize gui to systray _ Fail safe source recoveryMsgbox UDF _ _procwatch() Stop your app from being closedLicensed/Trial software system _ Buffering Hotkeys_SQL.au3 ADODB.Connection _ Search 2d Arrays_SplashTextWithGraphicOn() _ Adjust Screen GammaTransparent Controls _ Eventlogs without the crap_GuiCtrlCreateFlash() _ Simple Interscript communication[u]Websites[/u]Curious Campers VW Hightops Lambert Plant Hire Link to comment Share on other sites More sharing options...
EBak Posted March 13, 2006 Author Share Posted March 13, 2006 Thanx for all the answers. The problem is fixed for now, by getting a new update of McAfee or the newest beta version of AutoIT. I updated both the programs at the same time, so I am not sure which one is responsible for it. Hopefully it stays like this. I only lost all backup executables, but i can still compile them with the newest AutoIt version if I need them. Link to comment Share on other sites More sharing options...
flaxcrack Posted March 13, 2006 Share Posted March 13, 2006 Hi,Since the update of Mcafee on 3 March 2006 all my executables that I did create with AutoIt are detected as a virus/Joke. Is anyone else has this problem and what can I do about it?regards,EmileYep, I get that even with some of my .au3 files. [quote] Gilbertson's Law: Nothing is foolproof to a sufficiently talented fool.Sandro Alvares: Flaxcrack is please not noob! i can report you is stop stupid. The Post[/quote]I made this: FWD & MD5PWD() Link to comment Share on other sites More sharing options...
jpm Posted March 13, 2006 Share Posted March 13, 2006 Yep, I get that even with some of my .au3 files.when you say .au3 you mean compiled .au3 !!!I cannot understand and antivirus detecting a virus in a pure text file. Link to comment Share on other sites More sharing options...
flaxcrack Posted March 13, 2006 Share Posted March 13, 2006 when you say .au3 you mean compiled .au3 !!!I cannot understand and antivirus detecting a virus in a pure text file.Nope...just on the .au3 file itself. The next time McAfee picks it up i'll paste the message in here. [quote] Gilbertson's Law: Nothing is foolproof to a sufficiently talented fool.Sandro Alvares: Flaxcrack is please not noob! i can report you is stop stupid. The Post[/quote]I made this: FWD & MD5PWD() Link to comment Share on other sites More sharing options...
jpm Posted March 13, 2006 Share Posted March 13, 2006 Nope...just on the .au3 file itself. The next time McAfee picks it up i'll paste the message in here.Whoah that's something very new for me!!!I wait Link to comment Share on other sites More sharing options...
slightly_abnormal Posted March 13, 2006 Share Posted March 13, 2006 when you say .au3 you mean compiled .au3 !!! I cannot understand and antivirus detecting a virus in a pure text file. try saving this as a text file.. your av should pick it up.. X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* Link to comment Share on other sites More sharing options...
CyberSlug Posted March 13, 2006 Share Posted March 13, 2006 try saving this as a text file.. your av should pick it up.. X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*Exactly what I was thinking http://www.eicar.org/anti_virus_test_file.htm Anyway, it seems that Friday was a particularly bad day for McAfee virus definitions. Use Mozilla | Take a look at My Disorganized AutoIt stuff | Very very old: AutoBuilder 11 Jan 2005 prototype I need to update my sig! Link to comment Share on other sites More sharing options...
RazerM Posted March 13, 2006 Share Posted March 13, 2006 Norton antivirus picks that up as EICAR TEST STRING, why does it think it is a virus? My Programs:AInstall - Create a standalone installer for your programUnit Converter - Converts Length, Area, Volume, Weight, Temperature and Pressure to different unitsBinary Clock - Hours, minutes and seconds have 10 columns each to display timeAutoIt Editor - Code Editor with Syntax Highlighting.Laserix Editor & Player - Create, Edit and Play Laserix LevelsLyric Syncer - Create and use Synchronised Lyrics.Connect 4 - 2 Player Connect 4 Game (Local or Online!, Formatted Chat!!)MD5, SHA-1, SHA-256, Tiger and Whirlpool Hash Finder - Dictionary and Brute Force FindCool Text Client - Create Rendered ImageMy UDF's:GUI Enhance - Enhance your GUIs visually.IDEA File Encryption - Encrypt and decrypt files easily! File Rename - Rename files easilyRC4 Text Encryption - Encrypt text using the RC4 AlgorithmPrime Number - Check if a number is primeString Remove - remove lots of strings at onceProgress Bar - made easySound UDF - Play, Pause, Resume, Seek and Stop. Link to comment Share on other sites More sharing options...
slightly_abnormal Posted March 13, 2006 Share Posted March 13, 2006 (edited) Norton antivirus picks that up as EICAR TEST STRING, why does it think it is a virus?standard virus test.. read nortons description. http://www.symantec.com/avcenter/venc/data...est.string.htmlhttp://www.eicar.org/anti_virus_test_file.htm Edited March 13, 2006 by slightly_abnormal Link to comment Share on other sites More sharing options...
wizzardking Posted March 14, 2006 Share Posted March 14, 2006 Post an example so we can check to see if other virus scanners also note it as a virus.AVG also returns with a virus report for autoit, however not just on what I have compiled but also for the autoit executable itself. I actually had to turn off autoprotect to get it to stop poping up warning messages on my server. I thought it was a bad install of AVG professional guess not eh?Also after reading these posts I installed autoit on my norton corp edition protected server, and it also says it's a virus BUT windowsonecare and ms defender do not, and Avast! doesn't either. with norton I just created an exclusion, and wrote AVG about it not being a virus and the fact that thier exclusion doesn't stop the stupid popup warnings every 5 seconds.`Mitch Link to comment Share on other sites More sharing options...
jpm Posted March 14, 2006 Share Posted March 14, 2006 AVG also returns with a virus report for autoit, however not just on what I have compiled but also for the autoit executable itself. I actually had to turn off autoprotect to get it to stop poping up warning messages on my server. I thought it was a bad install of AVG professional guess not eh?Also after reading these posts I installed autoit on my norton corp edition protected server, and it also says it's a virus BUT windowsonecare and ms defender do not, and Avast! doesn't either. with norton I just created an exclusion, and wrote AVG about it not being a virus and the fact that thier exclusion doesn't stop the stupid popup warnings every 5 seconds.`MitchI can agree an antivirus can give in this specific case a lase alarm if your machine is not infected on the autoit executable or a compiled script which is build from the same code.But giving and alarm on an script itself (.au3) which is a text file is beyond my comprehension except this test file that Mc Afee distribute to check if their code is detecting something.As usual I have no answer of which version of autoit produce this 'false" alarm.The best is to forward your file to your antivirus provider and have them correct their detectection algorithm/signature. Link to comment Share on other sites More sharing options...
Confuzzled Posted March 14, 2006 Share Posted March 14, 2006 These false positives are positively annoying. Could we make a common thread, title it "My anti-virus just called AutoIT badware" or something similar, sticky it, and move all these posts that keep cropping up on a daily/weekly basis into them? This would be an ongoing, long and sad reflection on the quality of anti-virus signature algorithms. Noobies could (possibly) see it before starting their own thread.I've had widely deployed compiled scripts disappear overnight on more than one occasion - one of the hazards of using a popular product that has too much power I suppose. Where anti-virus vendors are lazy to differentiate between valid nasties and the common non-infested runtime, having a common thread will document that on an ongoing basis.(Could be worse - it could be McAfee reporting and deleting Excel.exe like happened last Friday I suppose) Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now