secman Posted January 8, 2009 Posted January 8, 2009 I have discovered this morning following an overnight AV update, that all my compiled Autoit scripts are being detected by our Sophos AV as being infected with W32/Sohana-BR (spyware).This has meant that staff and student menu systems have "disappeared". I have reported this to SOPHOS in the UK along with a sample file. They will hopefully be issuing a fix in the near future. Alan
KaFu Posted January 8, 2009 Posted January 8, 2009 Try to compile the scripts without UPX compression, that fixed a problem with F-Secure for me... Best Regards OS: Win10-22H2 - 64bit - German, AutoIt Version: 3.3.16.1, AutoIt Editor: SciTE, Website: https://funk.eu AMT - Auto-Movie-Thumbnailer (2024-Oct-13) BIC - Batch-Image-Cropper (2023-Apr-01) COP - Color Picker (2009-May-21) DCS - Dynamic Cursor Selector (2024-Oct-13) HMW - Hide my Windows (2024-Oct-19) HRC - HotKey Resolution Changer (2012-May-16) ICU - Icon Configuration Utility (2018-Sep-16) SMF - Search my Files (2025-May-18) - THE file info and duplicates search tool SSD - Set Sound Device (2017-Sep-16)
secman Posted January 8, 2009 Author Posted January 8, 2009 Just to let everyone know, Sophos have issued a fix for this problem. If members make sure that their AV is up to date then the problem should go away. Thanks Alan
arcker Posted January 8, 2009 Posted January 8, 2009 ?? HUH ?? our NAS is controlled by Sophos, and all of my script are on it... thx for the information i will take a look -- Arck System _ Soon -- Ideas make everything "La critique est facile, l'art est difficile" Projects :[list] [*]Au3Service : Run your exe as service V3 / Updated 29/07/2013 Get it Here [/list]
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now