Avast 4.8 Anti Virus and Autoit v3.2.12.1 (Trojan Found )

[H.J.]

Hi All,

When I'm trying usine Autoit v3.2.12.1 "Compile Script" option from the context menu to to compile my scripts,

the Avast 4.8 Anti virus with the last updating on Jun 27, 2008 giving Warning message saying "A Trojan Horse Was Found"

and giving Malware name is Win32:Spayware-gen[Trj], Malware Type : Trojan Horse.

I start cleaning my computer using Avast 4.8 Anti virus and run the Avast againg no viruses on my pc found, then I tried again

to compile my scripts the Avast Anti-Virus giving the same message "A Trojan Horse Was Found" and not allowing to continue

compiling the scripts. Then I Tried to download Autoit v3.2.12.1 again from Autoit web site then install it on my pc then try again

to compile my script to EXE but the same problem with Avast.

My problem solved by downloading the BETA version of Autoit and installing it and try to use the its Compiler AutoIt3\Beta\Aut2Exe\Aut2exe.exe instead of

AutoIt3\Aut2Exe\Aut2exe.exe. You can see the image i uploaded

What is the reason ?

Best regards

H.J.

[MrCreatoR]

What is the reason ?

Are my AutoIt EXEs really infected?

[H.J.]

Thanks,

Way there is no message warning giving from Avast when i used the Autoit BETA Version Compiled Scripts ?

Best regards

[MrCreatoR]

Way there is no message warning giving from Avast when i used the Autoit BETA Version Compiled Scripts ?

Perhaps the beta by default does not compiling with UPX?

[H.J.]

My Other executable files which I compiled it by the previuse Autoit versions no warning message from Avast giving and it's ok.

but only when I compiled it with Autoit V3.2.12.1 giving the problem.

Thanks lot for your help

Best regards

[H.J.]

I search for the UPX Application in both Autoit V3.2.12.1 and The Autoit BETA Version, I Found there have the same size but there is different

in the Date Modified, The Autoit Beta version using The UPX Application with date modified 5/19/2008 but UPX application in Autoit V3.2.12.1 with date modified 5/9/2008.

Please any solution for the problem with Autoit V3.2.12.1

[rover]

I currently use Avast! 4.8 Home Edition. (Why not, It's free.. along with ClamWin)

AV companies constantly adding signature detections from black hat AutoIt binaries to their database updates

is not going to stop any time soon.

In regards to the differing UPX versions.

UPX included with AutoIt gets updated with new versions from the UPX Author.

as advised in the sticky, either stop using UPX compression or change to another compressor

and add your AutoIt program and script folders to Avasts exclusion list under 'Program Settings' in the tray icon menu.

that will shut it up.

If you don't, you will go through round after round of annoying false positives and AutoIt file deletions by Avast

whenever some asshole distributes an AutoIt compiled binary with whatever version of AutoIt they used that starts a new round of

'let's just use an AutoIt compiled binary detection routine instead of malicious code detection signature in our latest database update' behaviour

from Avast and other anti-virus developers.

enough said.

[H.J.]

thanks rover for your replay, but with Autoit Beta version there is no problem with Avast 4.8, may be the upx application came with Autoit beta version

was cleaned by the UPX Author.

Best regards

H.J.