AVG problem with AutoIt scripts ... ? What to do to stop A..

MitchellWmA · External Since: May 21, 2009 Posts: 2

For a month or more, I've had no end of problems with AVG. I have
tons of scripts that I've written in AutoIt and AVG keeps telling me
they're viruses. I've written these scripts myself and I don't know
how to write a virus. The scripts are simple and straightforward so
there's no excuse for this.

I've added AutoIt to the exceptions but AVG ignores this. Also, the
upx compiled scripts are not the only ones that are affected even many
of my uncompiled scripts are being listed. It's a pain in the neck
but I don't know where to go to fix this. Any guidance appreciated
since these are not viruses so I don't know what avenue to take to
stop AVG from getting stuck on my scripts. Thanks. Much appreciated.

David H. Lipman · External Since: Jul 04, 2003 Posts: 2116

From: "MitchellWmA" <nospam DeleteThis @nojunkmail.com>

| For a month or more, I've had no end of problems with AVG. I have
| tons of scripts that I've written in AutoIt and AVG keeps telling me
| they're viruses. I've written these scripts myself and I don't know
| how to write a virus. The scripts are simple and straightforward so
| there's no excuse for this.

| I've added AutoIt to the exceptions but AVG ignores this. Also, the
| upx compiled scripts are not the only ones that are affected even many
| of my uncompiled scripts are being listed. It's a pain in the neck
| but I don't know where to go to fix this. Any guidance appreciated
| since these are not viruses so I don't know what avenue to take to
| stop AVG from getting stuck on my scripts. Thanks. Much appreciated.

I doubt it is calling them a "virus", mot likely trjans.
AutoIt is *often* used in trojans. I come across many.

I suggest moving from AVG. Upload your compiled scripts to Virus Total and see if Avira
AntiVir ais flagging them as badly. If not, remove AVG and install Avira AntiVir.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

MitchellWmA · External Since: May 21, 2009 Posts: 2

On Thu, 21 May 2009 17:57:27 -0400, "David H. Lipman"
<DLipman~nospam~@Verizon.Net> wrote:

>From: "MitchellWmA" <nospam DeleteThis @nojunkmail.com>
>
>| For a month or more, I've had no end of problems with AVG. I have
>| tons of scripts that I've written in AutoIt and AVG keeps telling me
>| they're viruses. I've written these scripts myself and I don't know
>| how to write a virus. The scripts are simple and straightforward so
>| there's no excuse for this.
>
>| I've added AutoIt to the exceptions but AVG ignores this. Also, the
>| upx compiled scripts are not the only ones that are affected even many
>| of my uncompiled scripts are being listed. It's a pain in the neck
>| but I don't know where to go to fix this. Any guidance appreciated
>| since these are not viruses so I don't know what avenue to take to
>| stop AVG from getting stuck on my scripts. Thanks. Much appreciated.
>
>I doubt it is calling them a "virus", mot likely trjans.
>AutoIt is *often* used in trojans. I come across many.
>
>I suggest moving from AVG. Upload your compiled scripts to Virus Total and see if Avira
>AntiVir ais flagging them as badly. If not, remove AVG and install Avira AntiVir.

I tried AntiVir before and I found it tough to work with. Is there
nothing that can be done with AVG? I've been using AutoIt for years
but this is rampant. I can't open up a folder without the popup
really grinding things to a halt. AVG used to be so good and it still
is easier to use than AntiVir _for_me_. But I will change to it if
there is absolutely nothing that can be done re my AutoIt scripts.
But is there truly nothing that can be done? Thanks.

David H. Lipman · External Since: Jul 04, 2003 Posts: 2116

From: "MitchellWmA" <nospam.TakeThisOut@nojunkmail.com>

| I tried AntiVir before and I found it tough to work with. Is there
| nothing that can be done with AVG? I've been using AutoIt for years
| but this is rampant. I can't open up a folder without the popup
| really grinding things to a halt. AVG used to be so good and it still
| is easier to use than AntiVir _for_me_. But I will change to it if
| there is absolutely nothing that can be done re my AutoIt scripts.
| But is there truly nothing that can be done? Thanks.

Contact Grisoft.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Mike S. · External Since: Nov 25, 2006 Posts: 4

In article <fcmb15tc4ik055pj8mfs3bt9f4bsf3sh47 DeleteThis @4ax.com>,
MitchellWmA <nospam DeleteThis @nojunkmail.com> wrote:
>For a month or more, I've had no end of problems with AVG. I have
>tons of scripts that I've written in AutoIt and AVG keeps telling me
>they're viruses. I've written these scripts myself and I don't know
>how to write a virus. The scripts are simple and straightforward so
>there's no excuse for this.
>
>I've added AutoIt to the exceptions but AVG ignores this. Also, the
>upx compiled scripts are not the only ones that are affected even many
>of my uncompiled scripts are being listed. It's a pain in the neck
>but I don't know where to go to fix this. Any guidance appreciated
>since these are not viruses so I don't know what avenue to take to
>stop AVG from getting stuck on my scripts. Thanks. Much appreciated.

Join the club. After AVG went bloatware I hung onto 7.5 until it ceased
to be supported with updates. I have a big flash drive full of portable
apps and it kept dinging one or another almost every time. Even stuff that
was written years and years before the putative "virus" it flagged even
existed. Frankly, I just got sick and tired of being sick and tired of
doing this all the time, and moved to Avira:

From <support DeleteThis @avg.com> Thu Feb 5 07:38:38 2009 -0500
From: AVG Technical Support <support DeleteThis @avg.com>
Message-ID: <0001Sa4RD7N161PG DeleteThis @grisoft.cz>
In-Reply-To: <20090204135349.48D6B24253 DeleteThis @panix5.panix.com>
Subject: Re: G#0903534830 - False positive?

Dear Sir/Madam,

thank you for your email.

Please let us inform you that the file attached to your previous
e-mail was really not infected.
The detection will be removed with the next AVG virus definitions
update.

Thank you for your cooperation.

Please feel free to contact us if we can be of further help.

Best regards,

Karol Rehak
AVG Technical Support

website: http://www.avg.com
mailto: support DeleteThis @avg.com

FromTheRafters · External Since: Feb 16, 2009 Posts: 26

"Mike S." <retsuhcs RemoveThis @xinap.moc> wrote in message
news:gv6bi9$7fv$1@reader1.panix.com...

> ... I have a big flash drive full of portable
> apps and it kept dinging one or another almost every time. Even stuff
> that
> was written years and years before the putative "virus" it flagged
> even
> existed.

The fact that a program predates a virus is irrelevant. In fact, it is
almost necessary.

Mike S. · External Since: Nov 25, 2006 Posts: 4

In article <gv7fk8$kb$1@news.eternal-september.org>,
FromTheRafters <erratic.DeleteThis@nomail.afraid.org> wrote:
>"Mike S." <retsuhcs.DeleteThis@xinap.moc> wrote in message
>news:gv6bi9$7fv$1@reader1.panix.com...
>
>> ... I have a big flash drive full of portable
>> apps and it kept dinging one or another almost every time. Even stuff
>> that
>> was written years and years before the putative "virus" it flagged
>> even
>> existed.
>
>The fact that a program predates a virus is irrelevant. In fact, it is
>almost necessary.

Yes, but in the cases the "infected" file is bit-for-bit identical to the
original stored in the distribution archive, which itself was prodiced
before the virus existed. And extracting the file from the original
distribution, AVG still insists it's infected ... until I email it to them
and get yet another retraction.

FromTheRafters · External Since: Feb 16, 2009 Posts: 26

"Mike S." <retsuhcs RemoveThis @xinap.moc> wrote in message
news:gv8nsc$na6$1@reader1.panix.com...
>
> In article <gv7fk8$kb$1@news.eternal-september.org>,
> FromTheRafters <erratic RemoveThis @nomail.afraid.org> wrote:
>>"Mike S." <retsuhcs RemoveThis @xinap.moc> wrote in message
>>news:gv6bi9$7fv$1@reader1.panix.com...
>>
>>> ... I have a big flash drive full of portable
>>> apps and it kept dinging one or another almost every time. Even
>>> stuff
>>> that
>>> was written years and years before the putative "virus" it flagged
>>> even
>>> existed.
>>
>>The fact that a program predates a virus is irrelevant. In fact, it is
>>almost necessary.
>
> Yes, but in the cases the "infected" file is bit-for-bit identical to
> the
> original stored in the distribution archive, which itself was prodiced
> before the virus existed. And extracting the file from the original
> distribution, AVG still insists it's infected ... until I email it to
> them
> and get yet another retraction.

I understand, and have also encountered the same sort of thing with
Avira, McAfee, Norton, AVG, Clamwin (no surprise there), and Avast! too.
The fact is that all AVs will false positive from time to time. I just
wanted to clarify that portion of your statement regarding viruses. A
prospective "host" program practically has to predate the infecting
instance, no? Surprised

D

Both Clamwin and Avira "found" malware in my Thinkpad's IBM tools - I
did nothing, and later scans found nothing. I believe others must have
reported the FP detections and definition files were adjusted
accordingly. One would think a QC program within the definition's
development team would have found these prior to releasing the defs to
the public, but I'm sure everyone is in a hurry...