victran Posted April 10, 2009 Posted April 10, 2009 Hi admin- I have a program and Sophos found virus - This is what error?Thanks asmin(My English is very bad, i srr )
CodyBarrett Posted April 10, 2009 Posted April 10, 2009 its possible that the programs blacklist has autoit in it [size="1"][font="Tahoma"][COMPLETED]-----[FAILED]-----[ONGOING]VolumeControl|Binary Converter|CPU Usage| Mouse Wrap |WinHide|Word Scrammbler|LOCKER|SCREEN FREEZE|Decisions Decisions|Version UDF|Recast Desktop Mask|TCP Multiclient EXAMPLE|BTCP|LANCR|UDP serverless|AIOCR|OECR|Recast Messenger|AU3C|Tik-Tak-Toe|Snakes & Ladders|BattleShips|TRON|SNAKE_____________________[u]I love the Helpfile it is my best friend.[/u][/font][/size]
victran Posted April 10, 2009 Author Posted April 10, 2009 I had check it again. My program is use function read memory (NormadMenory). So, detected virus
victran Posted April 10, 2009 Author Posted April 10, 2009 yesterday to not detected but today, sophos found virus
Authenticity Posted April 10, 2009 Posted April 10, 2009 Try without using UPX if you checked this option and compiled your script.
victran Posted April 10, 2009 Author Posted April 10, 2009 thanks a lot srr, but i dont know what is "without using UPX" i just use program "Compile Script to.exe" in Autoit
Authenticity Posted April 10, 2009 Posted April 10, 2009 (edited) Press Ctrl+F7 on the SciTE editor, you'll see a compile GUI window with options and stuff. Uncheck the UPX checkbox and test for virus. Edited April 10, 2009 by Authenticity
Moderators SmOke_N Posted April 10, 2009 Moderators Posted April 10, 2009 thanks a lot srr, but i dont know what is "without using UPX" i just use program "Compile Script to.exe" in AutoitPut this at the top of your script:#AutoIt3Wrapper_UseUpx=n Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.
Developers Jos Posted April 10, 2009 Developers Posted April 10, 2009 Press Ctrl+F7 on the SciTE editor, you'll see a compile GUI window with options and stuff. Uncheck the UPX checkbox and test for virus. Put this at the top of your script:#AutoIt3Wrapper_UseUpx=n * just of completeness * These will only work when you have the Full version of SciTE4AutoIt3 installer. this is done by downloading and installing a separate installer. Jos SciTE4AutoIt3 Full installer Download page - Beta files Read before posting How to post scriptsource Forum etiquette Forum Rules Live for the present, Dream of the future, Learn from the past.
victran Posted April 10, 2009 Author Posted April 10, 2009 thanks a lot But its unsuccessful I have the Full version of SciTE4AutoIt3
Developers Jos Posted April 10, 2009 Developers Posted April 10, 2009 (edited) thanks a lot But its unsuccessfulI have the Full version of SciTE4AutoIt3Your are not clear which part is unsuccessful, but report it to your AV provider as False positive.Jos Edited April 10, 2009 by Jos SciTE4AutoIt3 Full installer Download page - Beta files Read before posting How to post scriptsource Forum etiquette Forum Rules Live for the present, Dream of the future, Learn from the past.
victran Posted April 10, 2009 Author Posted April 10, 2009 New update of Sophos detected Autoit have virus, I had test with file "calculator.au3" in AutoIt3\Examples. It had been delete after compile. I think, script that concern with the system of windows will be Sophos found virus
Eric2905 Posted April 10, 2009 Posted April 10, 2009 Hi, Every script compiled in exe mode are detected as Mal/Behav-310. Sophos doesn't give some information except that you could send the file detected as a virus. I want the response from Sophos. Somebody has a solution ? Eric.
Developers Jos Posted April 10, 2009 Developers Posted April 10, 2009 I am closing this topic: Just read the sticky to resolve your AV problems and stop creating these threads every time. SciTE4AutoIt3 Full installer Download page - Beta files Read before posting How to post scriptsource Forum etiquette Forum Rules Live for the present, Dream of the future, Learn from the past.
Recommended Posts