W7 MSE detection on latest V2

[JoeWinograd]

Hi lexikos,
Just installed V2.0-a108-a2fa0498 on a W7 system running MSE...got the (presumably false positive) detection below. This has never happened before on any V2 install. Regards, Joe

MSE-detection-AutoHotkey_V2.0-a108-a2fa0498.png (55.18 KiB) Viewed 2560 times

[swagfag]

aint much lexikos can do about that. report, report, report, find the appropriate channels and report false positives there

this file is only required for compilation. delete it if ure paranoid and u dont need it. compile from source if u think the exe is tainted

[JoeWinograd]

> aint much lexikos can do about that

Maybe, maybe not...curious that it never happened before. I figured it was worth letting him know.

> report false positives there

Yes, I do that often.

> delete it if ure paranoid and u dont need it

I'm not paranoid about it...in fact, I told MSE to allow it.

> compile from source if u think the exe is tainted

I don't think the EXE is tainted...I think it's a false positive.

[SOTE]

AHK members have to keep vigilant in reporting false-positives, in order for Anti-Virus companies to update their databases.

[JoeWinograd]

AHK members have to keep vigilant in reporting false-positives

Agreed! I submit my programs often...Setup.exe files (installers) created by NSIS with the EXE files created by the AHK compiler. But this is the AHK compiler itself...who should be submitting that? Regards, Joe

[SOTE]

AHK members have to keep vigilant in reporting false-positives

Agreed! I submit my programs often...Setup.exe files (installers) created by NSIS with the EXE files created by the AHK compiler. But this is the AHK compiler itself...who should be submitting that? Regards, Joe

Anybody should be able to submit any of the files for examination. Depending on the Anti-Virus company, they might have some requirements for the format, like must be a .zip with a certain name, but many of the companies will take exe files.

Microsoft has a note about putting the files into a .zip or .rar with the password "infected", but that appears to be only a suggestion for submitting private or personal type files. Seems you can submit .exe or multiple files in a plain .zip files without issue. They will still give tracking information, inspect them, and give the results of their analysis.

[_3D_]

Try VirusTotal