Abyssmedia.com Forum Index Abyssmedia.com
Abyssmedia Support Forums
 
  FAQ    Search    Memberlist    Usergroups   Register 
  Profile    Log in to check your private messages    Log in 

big problem - trojan.Win32.Agent.kl
Goto page 1, 2  Next
 
Post new topic   Reply to topic    Abyssmedia.com Forum Index -> Quick Batch File Compiler
View previous topic :: View next topic  
Author Message
sixpack



Joined: 08 Dec 2004
Posts: 13

PostPosted: Fri Oct 21, 2005 9:43 am    Post subject: Reply with quote

I have f-secure anti virus and recently it see's the compiled exe's as a trojan called trojan.Win32.Agent.kl


please a solution
Back to top
Oleg Tsheglov
Site Admin


Joined: 13 Feb 2004
Posts: 309

PostPosted: Fri Oct 21, 2005 5:07 pm    Post subject: Reply with quote

Yes, I know. Somebody sent report to F-Secure and they add signature to database.
Moreover, AVG antivirus detect trojans inside compiled files too.
I think this problem will be fixed after next update, but....another person may use QuickBFC for creating virus and antivirus will detect viruses inside ALL compiled files.
Back to top
fireball500
Guest





PostPosted: Fri Oct 21, 2005 6:58 pm    Post subject: Reply with quote

Hi,

It apprears that the anti-virus software I use, Microtrend, also detects the final .exe file as a virus and does not allow me to create the file.

Any solution?
Back to top
Oleg Tsheglov
Site Admin


Joined: 13 Feb 2004
Posts: 309

PostPosted: Sat Oct 22, 2005 4:57 pm    Post subject: Reply with quote

I really don't know.... We sent reports to many antivirus companies but still no reaction.



Edited By Oleg Tsheglov on 1130072517
Back to top
Code Cloude



Joined: 20 Oct 2005
Posts: 3

PostPosted: Sat Oct 22, 2005 11:05 pm    Post subject: Reply with quote

Pack quickbfd.exe(unpack it first -it's packe with UPX) with some exepacker like PE-compact, ASpack, Morphin some old or not very well known one to knock out the AV-Scanners. :angry:
http://protools.cjb.net
Also try combination of different packers.



Edited By Code Cloude on 1130025706
Back to top
Oleg Tsheglov
Site Admin


Joined: 13 Feb 2004
Posts: 309

PostPosted: Sun Oct 23, 2005 1:06 pm    Post subject: Reply with quote

Code Cloude wrote:
Pack quickbfd.exe(unpack it first -it's packe with UPX) with some exepacker like PE-compact, ASpack, Morphin some old or not very well known one to knock out the AV-Scanners. :angry:
http://protools.cjb.net
Also try combination of different packers.

No, this is only temporary solution. Virus detected inside EXE loader. If we compresss it with another EXE packer then antiviruses will add new signature to database in short time.
We really must rewrite internal compression routines to avoid false alarms.
Back to top
Eddy Wuyts
Guest





PostPosted: Thu Oct 27, 2005 6:57 am    Post subject: Reply with quote

Hi,

I used QBFC on my work to write a lot of batch procedures.
Procedures like automatic starting up some server drives when launching some specific programs.
Yesterday the AV soft simply deleted all my exe (batch files) created with QBFC. There seems to be a trojan horse in these exe files.
I don't have to mention what kind of problems this as caused (and still is causing).
Can i have an official answer of abyssmedia ?
My e-mail is
eddy@wuyts.com
Thanks.
Back to top
Oleg Tsheglov
Site Admin


Joined: 13 Feb 2004
Posts: 309

PostPosted: Thu Oct 27, 2005 1:06 pm    Post subject: Reply with quote

Our official answer: "This is false positive." We sent a lot of emails to AV vendors, but still not have any answers.
AVG antivirus always detect trojan inside our compiler, we sent at least 6 emails to them, but.... no reaction.
Back to top
Oleg Tsheglov
Site Admin


Joined: 13 Feb 2004
Posts: 309

PostPosted: Thu Oct 27, 2005 1:31 pm    Post subject: Reply with quote

I recormmend all AVG customers read this threads:

http://forum.grisoft.cz/freefor....ge=,sv=
http://forum.grisoft.cz/freeforum/read.php?7,48685,backpage=4,sv=
http://www.coolmon.org/forum/viewtopic.php?t=4057

Grisoft claimed many installers and compilers as trojans and never remove it from database!
Back to top
Oleg Tsheglov
Site Admin


Joined: 13 Feb 2004
Posts: 309

PostPosted: Thu Oct 27, 2005 1:36 pm    Post subject: Reply with quote

Finally we got answer from Grisoft (AVG Antivirus) !

Dear Sir/Madam,

Thank you for your email.

The file will be removed from the detection rules.

Best regards,

Oldrich Muller
AVG Technical Support

website: http://www.grisoft.com
mailto: technicalsupport@grisoft.com
Back to top
sixpack



Joined: 08 Dec 2004
Posts: 13

PostPosted: Thu Oct 27, 2005 9:06 pm    Post subject: Reply with quote

Oleg Tsheglov wrote:
Finally we got answer from Grisoft (AVG Antivirus) !

Dear Sir/Madam,

Thank you for your email.

The file will be removed from the detection rules.

Best regards,

Oldrich Muller
AVG Technical Support

website: http://www.grisoft.com
mailto: technicalsupport@grisoft.com

did you sent f-secure a e-mail to?
Back to top
Oleg Tsheglov
Site Admin


Joined: 13 Feb 2004
Posts: 309

PostPosted: Fri Oct 28, 2005 6:44 am    Post subject: Reply with quote

Yes, waiting for reaction...
Back to top
thickfreakness



Joined: 21 Apr 2005
Posts: 14

PostPosted: Tue Dec 27, 2005 2:58 am    Post subject: Reply with quote

some people that use my files get this problem, I have never used Mcafee





Edited By thickfreakness on 1135893635
Back to top
Oleg Tsheglov
Site Admin


Joined: 13 Feb 2004
Posts: 309

PostPosted: Tue Dec 27, 2005 8:12 pm    Post subject: Reply with quote

McAfee don't like baseball Smile
Back to top
rge



Joined: 19 Jan 2006
Posts: 1

PostPosted: Thu Jan 19, 2006 11:10 am    Post subject: Reply with quote

Hi, after download this compiler and create a exe file, my anti-virus from Mcafee detect the Univ.script/99 virus in the bat file created in %temp%. I don't know what can I do to resolve this. Can anyone help-me?
Back to top
Display posts from previous:   
Post new topic   Reply to topic    Abyssmedia.com Forum Index -> Quick Batch File Compiler All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001-2011 phpBB Group