Trojan Horse - AV software detecting compiles as Trojan

Convert your BATch files into EXEcutable format in one click.
Post Reply
MDanihy
Posts: 4
Joined: Tue Feb 06, 2007 1:57 pm

Post by MDanihy » Tue Feb 06, 2007 2:02 pm

Every time I compile a file, Symantec Corporate AV 10.5 detects the resulting .EXE file as a Trojan Horse and promptly deletes it.

MDanihy
Posts: 4
Joined: Tue Feb 06, 2007 1:57 pm

Post by MDanihy » Thu Feb 08, 2007 7:53 pm

Never mind, whatever was going on has since cleared up. ???

Oleg Tsheglov
Site Admin
Posts: 309
Joined: Fri Feb 13, 2004 5:55 pm
Contact:

Post by Oleg Tsheglov » Fri Feb 09, 2007 1:08 am

This is false positive.

MDanihy
Posts: 4
Joined: Tue Feb 06, 2007 1:57 pm

Post by MDanihy » Fri Feb 09, 2007 4:49 pm

I understand that it was a false positive. Any other .EXE that had been previously created wasn't caught as a Trojan. The act by which the compile was created caused the AV software to believe the resulting .EXE was in fact a Trojan; thereby deleting the file before it could even be placed. As I stated, the issue has cleared and I have no idea why it was doing it.

BillyCrook
Posts: 3
Joined: Fri Mar 09, 2007 7:05 pm

Post by BillyCrook » Fri Mar 09, 2007 7:07 pm

Trend Micro is claiming that %Programfiles%\Quick Batch File Compiler\stubg.DLL is Troj_Generic.CON You may wish to contact them about this.

BillyCrook
Posts: 3
Joined: Fri Mar 09, 2007 7:05 pm

Post by BillyCrook » Fri Mar 09, 2007 8:56 pm

Trend is also flagging everything made by QBFC as a virus too! Someone needs to straighten them out!

support
Site Admin
Posts: 404
Joined: Fri Feb 13, 2004 1:05 pm

Post by support » Sat Mar 10, 2007 1:39 am

BillyCrook wrote:Trend is also flagging everything made by QBFC as a virus too! Someone needs to straighten them out!
Please download this update http://www.abyssmedia.com/downloads/qbfc2160.exe

griffin.ray@gmail.com
Posts: 1
Joined: Fri Mar 30, 2007 3:27 pm
Location: USA

Post by griffin.ray@gmail.com » Fri Mar 30, 2007 3:28 pm

THANK YOU!! Wow, I am SO glad this finally got resolved!
Btw, I am using Avast and am now having no problems :mrgreen:

BillyCrook
Posts: 3
Joined: Fri Mar 09, 2007 7:05 pm

Post by BillyCrook » Mon Apr 09, 2007 10:12 am

Are they just going to blacklist this version too? Putting out a binary with a different signature will keep it from being snagged, for now. But what really needs to happen is the owher of QBFC to contact Trend and propose legal action if Trend fails to immediately cease harassing his customers and slandering his product.

Post Reply