Jump to content

URLDownloadToFile - Virus?


Gho5t
 Share

Recommended Posts

hi to all....

i come here because i don't understand what's happend...

i have Anti-vir and i try to use the instruction "URLDownloadToFile" for download a file txt from my website (i have a file txt as log in website and i want to keep a copy of this file in my pc).

i use the instruction:

if URLDownloadToFile ( "File_On_My_Website", "File_Local" ) = 1 Then
    MsgBox(048, "File", "File scaricato correttamente")
Else
    MsgBox(016, "File", "Errore durante il download del file")
endIf

and when i try to compile this script anti-vir tell me that it is a virus (SPR/Agent.198979)

why Anti-vir tell me that it is a virus?

p.s. sorry for my english...

Link to comment
Share on other sites

hi to all....

i come here because i don't understand what's happend...

i have Anti-vir and i try to use the instruction "URLDownloadToFile" for download a file txt from my website (i have a file txt as log in website and i want to keep a copy of this file in my pc).

i use the instruction:

if URLDownloadToFile ( "File_On_My_Website", "File_Local" ) = 1 Then
    MsgBox(048, "File", "File scaricato correttamente")
Else
    MsgBox(016, "File", "Errore durante il download del file")
endIf

and when i try to compile this script anti-vir tell me that it is a virus (SPR/Agent.198979)

why Anti-vir tell me that it is a virus?

p.s. sorry for my english...

A lot of virus programs say that AutoIt scripts could be viruses. Since it downloads a file it most likely things it's a Trojan Downloader.

[center]My BlogOldSock Programs (AutoIT Apps)A Message to Hackers! (NOT SKIDDIES!)OldSock Programs is my little "company."[/center]

Link to comment
Share on other sites

It's been a long time since URLDownloadToFile was renamed to INetGet, but it looks like it's still allowed as an alias.

It's not mentioned anywhere in the helpfile though, except for in the history it looks like.

Anyway, just in case you didn't know the newest version of AutoIt is 3.2.2.0, so if you're still running a pre-3.1.0

version I would suggest you to update :whistle:

Edited by Helge
Link to comment
Share on other sites

It's been a long time since URLDownloadToFile was renamed to INetGet, but it looks like it's still allowed as an alias.

It's not mentioned anywhere in the helpfile though, except for in the history it looks like.

Anyway, just in case you didn't know the newest version of AutoIt is 3.2.2.0, so if you're still running a pre-3.1.0

version I would suggest you to update :whistle:

i have the version 3.2.2.0....

maybe i have a old help file (i download the help file on my language....)

thanks to all

Link to comment
Share on other sites

Hi together,

i have the same problem, but without any code.

My code is :

CODE

IF MsgBox(1+32,"Fehler","Mach mal Update?")=1 Then

Exit

Else

Exit

EndIf

No include, nothing else.

The problem seem to bee the packing routing or something like that (http://www.autoitscript.com/forum/index.php?showtopic=34658)

I've sent an email to Antivir, the answer in german is:

Sehr geehrte Damen und Herren,

wir bedanken uns für Ihre Anfrage.

In der von Ihnen eingesendeten Datei ist kein Virus enthalten.

Es handelt sich um einen Fehlalarm. Dieser Fehlalarm wird mit einem

der nächsten Updates von AntiVir beseitigt.

Wir bitten um Ihr Verständnis.

Überprüfte Datei(en):

- xxx.exe

Freundliche Gruesse / Best regards

Avira GmbH

Fabian Henne

First Level Support

Avira GmbH

Lindauer Str. 21, D-88069 Tettnang, Germany

Internet: http://www.avira.com

Geschäftsführender Gesellschafter: Tjark Auerbach

Sitz der Gesellschaft: Tettnang; AG Ulm HRB 630992

=> They (Avira GmbH) will remove this error in one of the next Antivir - Updates.

BR

Markus

Link to comment
Share on other sites

Yes, as I said, UPX is a semi-popular packer, which many MALICIOUS hackers or CRACKERS use. Or just plain malicious coders. Anyways, McAfee and Norton get this in their system, along with about 200 other. They then think that packed with UPX programs are evil. Send a couple anti-viruses your code, etc.

[center]My BlogOldSock Programs (AutoIT Apps)A Message to Hackers! (NOT SKIDDIES!)OldSock Programs is my little "company."[/center]

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...