Jump to content

Au3toCmd -- Avoid false virus positives. (Version: 2022.09.01)


Exit
 Share

Recommended Posts

Hi @Exit, I am seriously evaluating your solution, but thinking and re-thinking, and taking the risk that you could consider this a critic (this is not the case! 😅) I kindly ask to you:

Why your solution is better than deploying autoit3.exe with A3X files ? "Only" because you can "hide" files in alternate data streams ?

Link to comment
Share on other sites

And even if it were criticism, this objection is very justified.

Au3toCmd is a solution where only one file is needed on the target system. The desktop shortcut is just an added bonus.
In contrast, your solution requires three files.
Autoit.exe, anyname.a3x and a cmd file for the call.


As the saying goes, many roads lead to Rome.  :thumbsup:

Edited by Exit

App: Au3toCmd              UDF: _SingleScript()                             

Link to comment
Share on other sites

Hi, 

When I test my au3tocmd file in virustotal (https://www.virustotal.com/)  I get below 10 hits. The original .a3x file gets above 20 or something, so for me it is an improvement. 

I use Au3toCmd  to create a zip file and extract the content again. Then i build a innosetup installer with the extracted files. The installer extracts the files and runs the cmd file to restore the original file with the stream. Then the script runs the cmd file to start the script. 

Works perfectly fine! (my users get a fancy installer instead of a cmd file). 

 

 

Edited by MightyWeird
Link to comment
Share on other sites

Hello @MightyWeird,

there seems to be an error in the virus total URL:
It's not called http://virustototal.com/
but http://virustotal.com/

When uploading to virustotal the *.cmd file created by Au3toCmd, no problems can be recognized, because the ADS files are not uploaded, but only the 332 bytes long *.cmd file.
What kind of file did you upload?  The *.zip file?

You are of course free to create an install wrapper, but it cannot be sent by email either, since most email programs do not transfer executable files. There has to be another zip file around it.

App: Au3toCmd              UDF: _SingleScript()                             

Link to comment
Share on other sites

3 hours ago, Exit said:

but it cannot be sent by email either, since most email programs do not transfer executable files

And they check inside nested zips also, best is, if you want to use a zip is to password protect it. You could make self extracting, and change it a little with resource hacker to provide the password on the window where it asks for the password too.

@MightyWeird How do you manage to get so many false positives? :) Mine get zero for the a3x, and the self executable zip file gets 3 hits (see below). Maybe the options for Aut2Exe make the difference, idk.

Also, @Exit (and others interested) I have a post in Developer section, not sure if you have seen it, maybe it will be of help to further improve deployment. 

 

Link to comment
Share on other sites

  • Developers
3 minutes ago, Arjunpulika said:

Great Information
 

Yours isn't really. Any reason you are only posting these none-contributing posts?

SciTE4AutoIt3 Full installer Download page   - Beta files       Read before posting     How to post scriptsource   Forum etiquette  Forum Rules 
 
Live for the present,
Dream of the future,
Learn from the past.
  :)

Link to comment
Share on other sites

I have complied with the request of some users and have now included the option of generating a self-extracting SETUP.EXE. For this purpose, some parts of the 7z software are loaded from the network.
The new code is in the first post.
Transfer the *.SETUP.EXE into the intended target directory and execute it.

Have fun. :thumbsup:

Edited by Exit

App: Au3toCmd              UDF: _SingleScript()                             

Link to comment
Share on other sites

I have now tested the program and it works very well, I have a suggestion that can facilitate a lot if it can be added.

When you select Yes to create the setup.exe file, you will be asked where you specify where the contents of the setup.exe file should be installed and unpacked and run, and then the setup.exe file created with the option you specified will be embedded in the setup.exe file. With this suggestion, the creator of setup.exe file can decide where to install the file as in this example c: \ test Is this possible in any way? This is to first avoid creating a folder and then copy the setup file to that folder and then run it from there.

Excuse my bad English.

Link to comment
Share on other sites

  • Exit changed the title to Au3toCmd -- Avoid false virus positives. (Version: 2022.09.01)

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...