AVG reckons the latest CH+S installer has a trojan in it

[katykaty]

It obviously presents just as much threat as an autohotkey script 

I've sent it off to them for testing - this is just a warning for you.

[mouser]

yeesh, this is getting ridiculous, i really wish these antivirus companies would show some more care.

i think the problem is that when antivirus tests are reported -- no one cares about false positives, but if an antivirus program ever MISSES detecting a virus, it looks bad.

so the motivation for antivirus companies is to just flag anything they dont understand as a virus.. not cool.

[Lashiec]

Don't worry, AVG is currently beta testing AVG 8, which (hopefully) will sport a redesigned antivirus engine, and this never-ending flood of false positives on its part will finally end.

I guess the program is reacting to the executable compression, something which at this point in antivirus development is a bit unbelievable. Supposedly AVG does support executable compression, but seems it's a bit flaky.

[mouser]

is chs still compressed? i thought i stopped compressing my executables a while ago, partly for this reason.

[Lashiec]

Oh, I thought you were still using ASPack (or was PECompact?) in your software... Then I guess AVG does not handle too well LZMA in Inno Setup but then, it would start to flag every installer out there. Who knows, AVG needs a serious update fast anyway, they're catching too many things, and losing too many others.

[katykaty]

Grisoft have just confirmed it's a false positive. Amazing!

Dear Sir/Madam,

Thank you for your email.

We have analyzed the file you have sent to us and it is false
detection. This issue will be fixed in next update as soon as
possible.

Please accept our apologize for any inconvenience this may cause.

Thank you for your cooperation.

         Best regards,

         Jan Hlavka
         AVG Technical Support

website: http://www.avg.com
mailto: [email protected]

To be fair to them, it's not the only AV in the world that gives false positives, and they got back to me within 4 hours.

[mouser]

that was a very quick reply -- got to give them points for that