Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Couldn't download - Virus detected #3

Open
TheNonSmoker opened this issue Nov 30, 2021 · 11 comments
Open

Couldn't download - Virus detected #3

TheNonSmoker opened this issue Nov 30, 2021 · 11 comments

Comments

@TheNonSmoker
Copy link

Screenshot 2021-11-30 174130

@alex47exe
Copy link
Owner

alex47exe commented Nov 30, 2021

All AutoIt compiled executables are reported as false positives. Mine is safe to download if you pause your av / add it to exceptions.
Found a way to avoid false positives but will require some polishing before I recompile all my projects. Basically I'll use an earlier AutoIt version to incude and run the main compiled a3x script.

@TheNonSmoker
Copy link
Author

Sorry, But...
Screenshot 2021-11-30 202304

@alex47exe
Copy link
Owner

I obviously know, man. Check every line of code and you'll see it's a false positive. Or do however you wish... I'll update it sometime in the future, as I was saying.

@alex47exe
Copy link
Owner

If you even try to compile an empty AutoIt3 script , aka .au3, you'll get false positives for the executable. I know what I'm talking about, but you're welcome to try...

@TheNonSmoker
Copy link
Author

OK dude, I'll try 👍

@Prefix1802
Copy link

All AutoIt compiled executables are reported as false positives. Mine is safe to download if you pause your av / add it to exceptions. Found a way to avoid false positives but will require some polishing before I recompile all my projects. Basically I'll use an earlier AutoIt version to incude and run the main compiled a3x script.

Dear sir or madam,

Although i/we really appreciate your work..... I am not so charmed by your answer.

Quote: "Mine is safe to download if you pause your av / add it to exceptions."
Question: Can you please explain, Why yours is safe? See also the next question.

Quote: "Found a way to avoid false positives"
Question: Can you please elaborate on that?

Also other questions i have:
Where are the false positives coming from?
Why do the AV prog's detecting this as a virus.
What line of code is causing this?

Please don't experience my questions as an attack. I am just curious.

With kind regards,

Prefix.

@alex47exe
Copy link
Owner

alex47exe commented Apr 12, 2022

Here's the false positives for an empty - as in it does absolutely nothing - compiled AutoIt3 script - New AutoIt v3 Script.exe
But don't believe me, download AutoIt3 and try it for yourself! Also have a good look through AutoUWP Launcher source files and please let me know if you find any malicious line of code! Then try compiling it yourself! You'll have to first compile the bat files into exe with any tool of your choosing, then compile the main script, AutoUWP Launcher.au3. Good luck trying to avoid false positives this way!
As I was saying, I found a way to avoid them, but it doesn't guarantee it'll work for every script. Basically it involves compiling the main script into an a3x file instead of exe, then using another compiled script to run that a3x file. Do note that the a3x launcher script would need to be compiled with an earlier version of AutoIt3 - more specifically Aut2Exe compiler, thus avoiding false positives. So far I've found that Aut2Exe versions 3.1.x.x are the most successful at avoiding false positives, but that's not guaranteed to work for every script. I've got a little tool I've written to quickly help me compile my scripts this way, but it's not exactly user friendly yet to be released. When that will happen, all my AutoIt3 projects will be updated and recompiled with it.

@Prefix1802
Copy link

Hi Alex, you are too kind. Thank you for replying so soon. I am/you made me very curious and i will investigate.

Again thank you so much for your work.

@alex47exe
Copy link
Owner

No worries. If you wish I can provide you with the tool I use to compile it, along with some instructions on how to use i, so u can test it with various Aut2Exe versions of the AutoIt3 compiler.

@BrandonRamage
Copy link

so im still getting a trojan warning from this even after all that back and forth.

@BrandonRamage
Copy link

why does it warn of a trojan specifically?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants