my antivirus kills upx compression when i compile

[Suirad]

i currently use Avast antivirus, its been working great untill it started flagging my upx compile with autoit

if i hit the "x" to get the compile to finish, it still give me errors and my program wont run.

it says something about: Win32:Poison-KP [Trj]

i cant manage to get it to skip it

any help?

edit: it never did this before, i just started today, and it makes me sad

Edited January 25, 2009 by Suirad

[Suirad]

anything at all?

[SmOke_N]

So don't use UPX. It's a public/free packer which is used by malicious software as well. Avast is obviously to lazy to single out the malicious programs and just flag anything UPX.

#AutoIt3Wrapper_UseUpx=n

Put that at the top of your script.

[regi]

My AV (BitDefender) also flags a few compiles, whilst UPXing, not all though, strangely enough.

I just disable my AV on the rare occasion.

[SmOke_N]

My AV (BitDefender) also flags a few compiles, whilst UPXing, not all though, strangely enough.

I just disable my AV on the rare occasion.

Brilliant... you know the issue, see there's a solution, but disable your protection against the world.

[regi]

Tinfoil hat wearer by any chance?

For the whole 3 seconds it takes to UPX, that's fine by me. My AV is neither protection against the world nor a necessity. Purely piece of mind for when one of my kids decides to tinker on daddies laptop.

[Mobius]

i currently use Avast antivirus, its been working great untill it started flagging my upx compile with autoit

if i hit the "x" to get the compile to finish, it still give me errors and my program wont run.

it says something about: Win32:Poison-KP [Trj]

i cant manage to get it to skip it

any help?

edit: it never did this before, i just started today, and it makes me sad

@dariuS,

Did you ever think that you might already be infected with malware that injects particular binaries

before bringing this gripe here?

It is most likely as SmOke_N says, in that Avast is just getting lazy with its heuristic's,

or its recognition database is flawed. In which case send the binary to Avast!

This topic has been quite a popular one over the years, try typing upx into the search feature!

You will find that using any sort of packer is a double edged sword, but most of the time an Av

flag is not an accurate representation of the packer or the program it has been applied to.

bored yet? < o_O >