search

zachanassian / tu_optimize

Tyrant Unleashed Optimizer
http://zachanassian.github.io/tu_optimize/
Other
8 stars 14 forks source link

False positive virus alert? #35

Closed Karel-van-de-Plassche closed 10 years ago

Karel-van-de-Plassche commented 10 years ago

Trying to share the SimpleTUOptimizeStarter.exe via Google Drive gives a virus warning, rendering the file un-sharable. (https://drive.google.com/file/d/0B1zH1qEQD_zWcml3b0cydzd5aUU/edit?usp=sharing) All other files don't generate a virus alert.

zachanassian commented 10 years ago

This has already been discussed here

SimpleTUOptimizeStarter.exe is generated out of SimpleTUOptimizeStarter.ahk. Details Autohotkey is a low level tool that is known to cause false positives in virus detection software. So my bet is that this is the case here as well.

However I do not and can not gurantee that SimpleTUOptimizeStarter.exe or any other part of tu_optimize is virus free. So

a) you do not use tu_optimize at all b) you do not use SimpleTUOptimizeStarter.exe c) install autohotkey and use the SimpleTUOptimizeStarter.ahk script d) you check the source code and [compile your own version](http://zachanassian.github.io/tu_optimize/install.html#compile of tu_optimize).

While option a) is savest option d) is the one I recommend.

Edit: Symantec WS.Reputation.1 : Shows that this is a heuristic check. So if some kid build a malicious exe from an .ahk file and compiled it the "wisdom of the crowd" will lead to the fact that all exe from an .ahk files are considered as malicious. Nevertheless I uploaded a version to Symantec's whitelist program but not sure when/if this will help.