The site ahead contains harmful programs

[_3D_]

https://www.autohotkey.com/download/ahk-v2.zip
Please check is the archive hacked

• U64: https://www.virustotal.com/gui/file/0e58cbe6a360f5440ee5b1da4d23c6761724154368a2c4841588d4f9e414cde3/detection
• U32: https://www.virustotal.com/gui/file/9b05f7214907c84969751ba99bc0086b45ae1f3c616732e101a924ffb696360f/detection

or change download procedure.

[gregster]

Google is a bit hyper-active... and getting worse https://www.autohotkey.com/boards/viewtopic.php?f=2&t=51243&start=40#p319417

[swagfag]

it wasnt(probably). its just the same old google shenanigans, only thing u can do is report away and maybe theyll change it back

[nnnik]

No this time we need to file a lawsuit.
We've had enough of this.

[gregster]

Good luck with that.
We rather need someone with intimate knowledge of Google's algorithms and/or good connections.

[nnnik]

"with intimate knowledge of Google's algorithm"
I think winning this lawsuit is a few magnitudes more likely then getting someone like that.
Someone with good connections to google might be a valid idea though.

[SOTE]

I'm of the opinion that Google and VirusTotal have some kind of agenda. With VirusTotal, they seem to select companies that aren't open enough to the public or of questionable reputation, and have dubious practices in terms of research and verification of what is or isn't malware. In regards to Google, it's almost like dealing with a black box. Very limited responsiveness and transparency.

You can attempt to contact VirusTotal staff and let them know about how you feel at-
https://www.virustotal.com/gui/contact-us
You might want to select the subject below

Code: Select all

My site/file has been improperly flagged as harmful (false positive)

[swagfag]

maybe host the .exes on github and just link to there. they probably dont like the ftp listing

[gregster]

They are already on github (https://github.com/Lexikos/AutoHotkey_L/releases), at least the v1.1 setup-exes. (Edit: the link missed the final s)

I already suggested to change the links to github... At least for the current releases of v1.1 and v2; the latter would need to be added.
(so far, github is only listed as a mirror - but on the downloads page behind google's warning page, so most people will never reach or see it).

[swagfag]

well, u can get to the download buttons from the main page, the problem is it tries to download an .exe which is hosted on ahk.com, prompting the warning
if it were fetching it from github instead, maybe the warning would be bypassed
also the v2 binaries arent currently hosted on github, only the zipped source

[gregster]

That's what I mean - the same with the download link at the top of the forums. But the download of the exe from github seems to be ok for Google (at least from the releases page).

If Lexikos - for whatever reason - doesn't want links to his github as the primary download source, perhaps we could mirror/release them on a separate AHK account, at least for the current versions. For older versions, we can still keep the FTP listing somewhere (additionally to github), if it's really deemed necessary to keep the FTP format.

Anything would be better than the current situation. Even if we don't offer a direct download link, but just a link to a releases page on github.

[john_c]

This also happens when I try to download the current version.

Most open-source software if proud about the fact of its openness. It gives great boost in terms of being future proof and - when it comes to not-so-well-known-products (like Photoshop) - of being secure. AutoHotkey, for some reason, is a bit shy about it.

Currently:

> AutoHotkey.
> Powerful. Easy to learn.

Could be changed to:

> AutoHotkey.
> Open-source. Powerful. Easy to learn.

Then, when you press "Download" button, you see another three ones: "Download Current Version", "Download V2 Alpha", "Download V1.0 Deprecated". Here, on this window, we can add a notification like this one:

variation 1

ahk1.png (20.71 KiB) Viewed 3751 times

variation 2

ahk2.png (23.32 KiB) Viewed 3751 times

The workaround with GitHub is better, though.

Edit: Another problem is that even if you already downloaded the file with Chrome, it will block it. You'll need to press Ctrl-J and "allow" it manually.