AutoHotkey Community

It is currently May 26th, 2012, 10:44 am

All times are UTC [ DST ]




Post new topic Reply to topic  [ 19 posts ]  Go to page 1, 2  Next
Author Message
PostPosted: August 17th, 2008, 5:41 am 
Offline

Joined: August 17th, 2008, 5:35 am
Posts: 8
Symantec Antivirus just deleted all of my autohotkey scripts' executable files, having mistakenly identified them as trojans. It also seems to be preventing me from creating new exe files.

What should I do?


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 17th, 2008, 7:49 am 
Offline

Joined: April 19th, 2005, 10:26 am
Posts: 2249
Location: switzerland
I don't know a solution for the symantec program
can restore , example in XP start this and make back to a previous system test point
Quote:
C:\WINDOWS\system32\restore\rstrui.exe

to don't lose your programs:
-make an ahk script which automatically saves to a 2.5" USB drive all created/modified files (example when shutdown)
( at the moment I use xxcopy )


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 12:05 am 
Offline

Joined: August 17th, 2008, 5:35 am
Posts: 8
Thanks for the reply. However, it's not so much *losing* the programs that I'm concerned about, since I have the scripts from which the programs were compiled. It's the fact that I can't *use* any exe files, or create new ones. So, e.g. my basic keyboard shortcuts cannot be automatically loaded when I start up windows.


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 4:05 am 
Offline

Joined: December 8th, 2006, 5:17 am
Posts: 248
Location: Sydney Australia
Hi

I am struggling against this too. In our network (with lotsa PCs), my compiled AutoHotkey EXEs are being nuked by Symantec.

Currently we are excluding the AHK Program folder (c:\Program Files\AutoHotkey\) as an excluded folder within the configuration of Symantec AntiVirus application. then we get the files restored out of quarantine.

It seems that a virus definition update of 17-08-2008 is the culprit http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2004-021914-2822-99.

_________________
Paul O


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 6:03 am 
ditto, i've been using dualboxed.com scripts.. they were deleted..


Report this post
Top
  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 6:51 am 
Offline

Joined: September 4th, 2004, 8:44 pm
Posts: 74
Location: UK
poo_noo wrote:
Hi



It seems that a virus definition update of 17-08-2008 is the culprit http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2004-021914-2822-99.


i don't think it's that one. i have the same problem and my defs file is '16/08/2008 rev. 3'

jack


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 6:54 am 
Offline

Joined: September 4th, 2004, 8:44 pm
Posts: 74
Location: UK
colton wrote:
It's the fact that I can't *use* any exe files, or create new ones. So, e.g. my basic keyboard shortcuts cannot be automatically loaded when I start up windows.


if you have autohotkey installed in the machine then you usually don't need the .exe anyway.

i load my key defs by running 'startup.ahk', which is a script that does lots of startup things for me... and in startup.ahk i have:

Code:
; key definitions
run c:\jack\ahk\keys.ahk



jack


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 7:38 am 
Offline

Joined: December 8th, 2006, 5:17 am
Posts: 248
Location: Sydney Australia
Oh I forgot to mention that I recompiled after renaming/removing UPX.exe and these new files escaped the AV scanner.

Its been a busy day.

_________________
Paul O


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 9:53 am 
Offline

Joined: February 5th, 2007, 3:37 pm
Posts: 31
Even if UPX is harmless, AV programs thinks it's virus from time to time. After some bad experiences, I always compile my scripts without compression. Problem solved.
Maybe upx should be disabled by default ?


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 12:56 pm 
Norton AV is a crap.


Report this post
Top
  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 1:45 pm 
Offline

Joined: September 4th, 2004, 8:44 pm
Posts: 74
Location: UK
AnAHKUser wrote:
Even if UPX is harmless, AV programs thinks it's virus from time to time. After some bad experiences, I always compile my scripts without compression. Problem solved.


yes, that works very nicely.


thanks

jack


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 6:59 pm 
Offline

Joined: August 17th, 2008, 5:35 am
Posts: 8
jack wrote:
colton wrote:
It's the fact that I can't *use* any exe files, or create new ones. So, e.g. my basic keyboard shortcuts cannot be automatically loaded when I start up windows.


if you have autohotkey installed in the machine then you usually don't need the .exe anyway.

i load my key defs by running 'startup.ahk', which is a script that does lots of startup things for me... and in startup.ahk i have:

Code:
; key definitions
run c:\jack\ahk\keys.ahk



jack


Thanks, I didn't know you could do that.

It doesn't fix things completely, though--the antivirus program freaks out when I try to run the script directly.


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 6:59 pm 
Offline

Joined: August 17th, 2008, 5:35 am
Posts: 8
jack wrote:
AnAHKUser wrote:
Even if UPX is harmless, AV programs thinks it's virus from time to time. After some bad experiences, I always compile my scripts without compression. Problem solved.


yes, that works very nicely.


thanks

jack


How do you set things to compile scripts without perimission?


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 7:42 pm 
If you mean compression, you need to rename UPX.exe in the compiler's directory to anything else. (Ex. UPX.exe.bak )


Report this post
Top
  
Reply with quote  
 Post subject:
PostPosted: August 18th, 2008, 11:32 pm 
Offline

Joined: August 17th, 2008, 5:35 am
Posts: 8
Yes, thanks, I meant compression.


Report this post
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 19 posts ]  Go to page 1, 2  Next

All times are UTC [ DST ]


Who is online

Users browsing this forum: bobbysoon, BrandonHotkey, Google [Bot], iBob35555VR, Tilter_of_Windmills, Yahoo [Bot] and 63 guests


You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Group