Problem with packing autoit script (VIRUS ?)

12/11/2013 13:05 mlukac89#1

i have problem when i made .exe file of my script and upload it on virustotal.com
it give me multiple viruses and i scaned on my computer with avira it say its clean

it show only for 32 bit

[Only registered and activated users can see links. Click Here To Register...]

and here is my code

Code:

#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
#AutoIt3Wrapper_Icon=D:\Igre\Justacarch\Archlord.ico
#AutoIt3Wrapper_UseUpx=n
#AutoIt3Wrapper_Compile_Both=y
#AutoIt3Wrapper_UseX64=y
#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
#cs ----------------------------------------------------------------------------

	AutoIt Version: 3.3.8.1
	Author:         Arctic

	Script Function:
	Changing window mode on/off.

#ce ----------------------------------------------------------------------------

; Script Start

#include <ButtonConstants.au3>
#include <GUIConstantsEx.au3>
#include <WindowsConstants.au3>

#region ### START Koda GUI section ###

$GUI = GUICreate("UI change", 203, 76, 252, 316)
$Checkbox1 = GUICtrlCreateCheckbox("Window mode", 16, 12, 89, 17)
$saveBtn = GUICtrlCreateButton("Save", 112, 8, 75, 25)
$selectBtn = GUICtrlCreateButton("Select Justac folder", 16, 40, 171, 25)
GUISetState(@SW_SHOW)

#endregion ### END Koda GUI section ###

Global $file = "COption.ini"
Global $path

While 1
	$nMsg = GUIGetMsg()
	Switch $nMsg
		Case $GUI_EVENT_CLOSE
			Exit
		Case $selectBtn
			$path = FileSelectFolder("Select Justac folder", "")
			If Not FileExists($path & "\ini\" & $file) Then
				MsgBox(48, "", "It�s not a Archlord folder")
			EndIf
		Case $saveBtn
			If GUICtrlRead($Checkbox1) == $GUI_CHECKED Then
				IniWrite($path & "\ini\" & $file, "Patch_Option", "Windowed", "1")
				MsgBox(64, "", "Window mode on", 5)
			Else
				IniWrite($path & "\ini\" & $file, "Patch_Option", "Windowed", "0")
				MsgBox(64, "", "Full screen mode on", 5)
			EndIf


	EndSwitch
WEnd

12/11/2013 13:33 butter123#2

activate or deactivate upx packing. might change sth. but you cant really do more.

12/11/2013 13:47 mlukac89#3

i didnt used UPX when i packed :(

12/11/2013 13:56 alpines#4

This happens more often than it should but it's normal.
Many antivirusprograms are detecting AutoIt-Scripts as a virus which are none.
You can deactivate upx but it doesn't help much.

12/11/2013 13:58 mlukac89#5

So nothing will help :(
Thanks all for answers ;)

12/11/2013 15:20 lolkop#6

actually i'm gettin the same results, [Only registered and activated users can see links. Click Here To Register...] and [Only registered and activated users can see links. Click Here To Register...]...

beside that, this is a good way to check which "antivirus tools" are simply useless...

there's different ways for "antivirus tools" to check for virusses.. for some of them, every tool accessing the hdd is a virus... others detect any tool accessing other processes memory as virus, others take any network action as a serious security problem...

in the end it's allways a good idea to just publish your tools open source, so every1 can easily check the source

12/12/2013 08:09 Shadow992#7

Quote:

Originally Posted by lolkop

actually i'm gettin the same results, [Only registered and activated users can see links. Click Here To Register...] and [Only registered and activated users can see links. Click Here To Register...]...

beside that, this is a good way to check which "antivirus tools" are simply useless...

there's different ways for "antivirus tools" to check for virusses.. for some of them, every tool accessing the hdd is a virus... others detect any tool accessing other processes memory as virus, others take any network action as a serious security problem...

in the end it's allways a good idea to just publish your tools open source, so every1 can easily check the source

You may also use my tool which protects autoit-scripts which was made to have as less virus warnings as possible so maybe it could help but there always will be some virus warnings left.