AutoHotkey Homepage AutoHotkey Community
Let's help each other out
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

My Scripts are Viruses?

 
Post new topic   Reply to topic    AutoHotkey Community Forum Index -> Ask for Help
View previous topic :: View next topic  
Author Message
Moki



Joined: 23 Feb 2008
Posts: 98
Location: North Carolina

PostPosted: Wed May 07, 2008 1:31 pm    Post subject: My Scripts are Viruses? Reply with quote

After I compile scripts that I have created they get stoped by avast and Mcafee antiviruses saying that they are worms. (I assure you that I have done nothing of the sort)

Any thought's?

One of which is an autoclicker which I have posted the code below.

Code:
Gui, Add, GroupBox, x6 y7 w150 h360 , Settings
Gui, Add, GroupBox, x156 y7 w310 h300 , Where To Click
Gui, Add, GroupBox, x156 y307 w310 h60 , Action Buttons
Gui, Add, Button, x356 y317 w100 h40 , Stop
Gui, Add, Button, x246 y317 w100 h40 , Start
Gui, Add, CheckBox, x16 y37 w80 h20 vsingleclick, Single Click
Gui, Add, CheckBox, x16 y57 w80 h20 vdoubleclick, Double Click
Gui, Add, Text, x16 y97 w90 h20 , Number of Clicks:
Gui, Add, Edit, x106 y97 w40 h20 vnoclicks, 0
Gui, Add, Button, x16 y337 w130 h20 , Mofiki.com
Gui, Add, CheckBox, x176 y27 w210 h20 vclickwheremouseis, Click where ever you place your Mouse
Gui, Add, Button, x176 y97 w270 h20 , Find Coordinates
Gui, Add, Text, x226 y127 w10 h20 , X:
Gui, Add, Edit, x236 y127 w60 h20 vxcoord,
Gui, Add, Text, x326 y127 w10 h20 , Y:
Gui, Add, Edit, x336 y127 w60 h20 vycoord,
Gui, Add, GroupBox, x166 y67 w290 h150 , Location Finder
Gui, Add, Text, x196 y157 w230 h40 , To use the location finder click find coordinates and then activate the window you want clicked and hit the space bar to save the location.
Gui, Add, GroupBox, x166 y227 w290 h70 , Time Between Clicks
Gui, Add, Text, x206 y247 w30 h20 , Hrs
Gui, Add, Edit, x206 y267 w40 h20 vhrs,0
Gui, Add, Text, x266 y247 w30 h20 , Min
Gui, Add, Edit, x266 y267 w40 h20 vmins,0
Gui, Add, Text, x326 y247 w30 h20 , Sec
Gui, Add, Edit, x326 y267 w40 h20 vsecs,0
Gui, Add, Text, x386 y247 w30 h20 , 1/10
Gui, Add, Edit, x386 y267 w40 h20 vtenths,0
Gui, Add, Text, x16 y257 w130 h80 , Thank You for Purchasing Mofiki's Autoclicker Premium Edition.  Please visit mofiki.com for more automation programs and macro's.
Gui, Add, Text, x16 y127 w130 h40 , To Pause the clicking at any time press the Pause button on your keyboard.
Gui, Add, GroupBox, x16 y177 w130 h70 , Delay Before Start
Gui, Add, Edit, x26 y197 w50 h20 vdelaystarttime, 5
Gui, Add, Text, x76 y197 w60 h20 , Seconds
Gui, Add, Text, x26 y217 w110 h20 , 5 seconds by default
Gui, Show, x327 y253 h379 w479, Mofiki's Autoclicker Premium Edition v1.0.0.1
SetTimer, ButtonFindCoordinates, 30
Return

GuiClose:
ExitApp


;---------------------------------------------------------------------------------------------------

ButtonStart:

Gui, Submit

ms:= (hrs * 3600000) + (mins * 60000) + (secs * 1000) + (tenths * 100)


gosub, timebetweenempty
gosub, singledoubleempty
gosub, clickoption
gosub, clickoption2
gosub, clickoption3
gosub, clickoption4


;---------------------------------------------------------------------------------------------------

timebetweenempty:

if (ms=0)
{
msgbox, Time Between Clicks cannot be 0
reload
return
}
else
{
return
}

;---------------------------------------------------------------------------------------------------

singledoubleempty:

if (singleclick=0) and (doubleclick=0)
{
msgbox, You Must Choose Single or Double Click
reload
return
}
else
{
return
}

;---------------------------------------------------------------------------------------------------

clickoption:

if (clickwheremouseis=1) and (singleclick=1)
{
sleep %delaystarttime%000

Loop, %noclicks%
{
sleep %ms%
click
}
reload
return
}
else
{
return
}


;---------------------------------------------------------------------------------------------------

clickoption2:

if (clickwheremouseis=1) and (doubleclick=1)
{
sleep %delaystarttime%000

Loop, %noclicks%
{
sleep %ms%
click
click
}
reload
return
}
else
{
return
}


;---------------------------------------------------------------------------------------------------

clickoption3:

if (clickwheremouseis=0) and (singleclick=1)
{
sleep %delaystarttime%000

Loop, %noclicks%
{
sleep %ms%
click %xcoord%,%ycoord%
}
reload
return
}
else
{
return
}

;---------------------------------------------------------------------------------------------------

clickoption4:

if (clickwheremouseis=0) and (doubleclick=1)
{
sleep %delaystarttime%000

Loop, %noclicks%
{
sleep %ms%
click %xcoord%,%ycoord%
click %xcoord%,%ycoord%
}
reload
return
}
else
{
return
}

;---------------------------------------------------------------------------------------------------

ButtonFindCoordinates:

CoordMode, Mouse, Screen

If GetKeyState("space","p")
{
   mousegetpos, xcoord, ycoord
   GuiControl,, xcoord, %xcoord%
   GuiControl,, ycoord, %ycoord%
}
Return

;---------------------------------------------------------------------------------------------------

ButtonStop:

ExitApp


;---------------------------------------------------------------------------------------------------

ButtonMofiki.com:

run http://mofiki.com
return

;---------------------------------------------------------------------------------------------------

Pause::
Pause

;---------------------------------------------------------------------------------------------------


_________________
http://www.mofiki.com
Back to top
View user's profile Send private message
TheIrishThug



Joined: 19 Mar 2006
Posts: 379

PostPosted: Wed May 07, 2008 1:40 pm    Post subject: Reply with quote

It is a false-positive by the anti-virus software, this is documented on the forum.

And by the way, this
Code:
if (clickwheremouseis=0) and (singleclick=1)
{
  sleep %delaystarttime%000

  Loop, %noclicks%
  {
    sleep %ms%
    click %xcoord%,%ycoord%
  }
  reload
  return
}
else
{
  return
}
is the same as this
Code:
if (clickwheremouseis=0) and (singleclick=1)
{
  sleep %delaystarttime%000

  Loop, %noclicks%
  {
    sleep %ms%
    click %xcoord%,%ycoord%
  }
  reload
}
return
except the second is shorter and more readable. You did this type of thing a few times in your script.
Back to top
View user's profile Send private message Visit poster's website AIM Address
Moki



Joined: 23 Feb 2008
Posts: 98
Location: North Carolina

PostPosted: Wed May 07, 2008 1:47 pm    Post subject: Reply with quote

thank you for the advise in the script and for the quick explaination. I guess its just something that has to be lived with .... although the people that I give it away to are griping lol
_________________
http://www.mofiki.com
Back to top
View user's profile Send private message
Moki



Joined: 23 Feb 2008
Posts: 98
Location: North Carolina

PostPosted: Wed May 07, 2008 2:12 pm    Post subject: Reply with quote

Okay I have searched through the forums and can't seem to find a fix for the virus being detected there are alot of theories but none seem to work for me is there a thread that has a fix or is it just going to have to be a given that antivirus will detect it.
_________________
http://www.mofiki.com
Back to top
View user's profile Send private message
_adam
Guest





PostPosted: Wed May 07, 2008 3:05 pm    Post subject: Reply with quote

can you try compiling it without compression, and see if the a/v still flags it.
Back to top
Moki



Joined: 23 Feb 2008
Posts: 98
Location: North Carolina

PostPosted: Wed May 07, 2008 4:20 pm    Post subject: Reply with quote

Okay all i did was delete upx.exe and then compiled it and it seems to be fine now. I guess i'll just compile a little larger files now.

If thats the fix its well worth it
_________________
http://www.mofiki.com
Back to top
View user's profile Send private message
Kosh
Guest





PostPosted: Wed May 07, 2008 5:03 pm    Post subject: Tried - no success Reply with quote

its a "bug" in mcafees virus-defs:

http://vil.nai.com/vil/content/v_140628.htm

Update December 7, 2007
McAfee Avert Labs has found a false detection with W32/Yahlover.worm and will be releasing the 5181 DAT Files to correct this issue.
The false detection is being seen on certain AutoIT 3.2.2.0 compiled executables.


Updated DAT
5289 (05/06/2008)
... here we go - let the fun begin Shocked Evil or Very Mad
Back to top
Display posts from previous:   
Post new topic   Reply to topic    AutoHotkey Community Forum Index -> Ask for Help All times are GMT
Page 1 of 1

 
Jump to:  
You can post new topics in this forum
You can reply to topics in this forum


Powered by phpBB © 2001, 2005 phpBB Group