DimSaver being flagged by AVG Anti-Virus Free Edition

[patthecat]

Since today's update of the AVG Anti-Virus (Free edition) signatures (program version 7.1.407; virus base 268.12.12/462; 10/3/2006), it is flagging DimSaver.scr as the trojan PSW.Agent.CRB

I checked the file TrendMicro Housecall (web version) and it did not find anything, so I think it may be a false positive on AVG's part.

[mouser]

remember that all of skrommel's software come in source code versions (compilable easily with autohotkey), so when in doubt, compile it!

but thanks for the report, these false virus reports are always super annoying.

[awefawe]

I downloaded the AHK source code, deleted a couple line breaks, and recompiled it; the AVG detection went away.

[mouser]

hehehe those evil viral blank lines huh 

[lanux128]

AVG latest update seems to have screwed up things. also a concern in this  topic. someone would have to write-in & let them know, someone who is using the premium edition that is..

until then awefawe's solution looks good.

[lanux128]

this warning is also being noticed in AHK forums: Compiled scripts detected as trojans.

[app103]

AVG's updates lately have been catching all kinds of things and flagging them...lots of false positives.

I have had a problem with Flaming Pear's Flood plugin for Photoshop and Paintshop Pro. I have had this plugin for many years and recently started getting notices from AVG every time I started Paintshop Pro. Then about 3 updates later the notices stopped. I am glad they fixed the prob. It was starting to drive me nuts.

[Muadib]

Hi People,

Once again AVG (7.5) is flagging DimSaver.scr as containing "Trojan horse BackDoor.Generic8.JOL". I know that is not true, but it's so annoying...

Can somebody give an idea about how to tell AVG to ignore the file? I already have tried to move it to the Vault and tell AVG to ignore the file, but the resident part is still detecting and removing it form System32 folder... 

Maybe Skrommel can contact Grisoft to tell them to remove DimSaver from their list in the next update?

Thanks.

[lanux128]

in the meantime try re-compiling the AHK source with the latest Autohotkey program and renaming DimSaver.exe as an SCR.

[Muadib]

in the meantime try re-compiling the AHK source with the latest Autohotkey program and renaming DimSaver.exe as an SCR.

-lanux128 (September 16, 2007, 07:12 PM)

Thanks lanux128 for the advice.

Even though I never compiled Autohotkey programs before, I would like to have a try.

Can you tell where I can get the code, please? I've tried in the Skrommel's page without success. And if possible, maybe a link for a "dummy proof" step-by-step instructions of how to compile it?

Thanks a lot.

[lanux128]

you need a program called "Ahk2Exe" which is included with the Autohotkey installer. after installing AHK, look in the Start Menu and you'll find a link to Ahk2Exe (see pic). start the program, choose your AHK script & click "convert" and you're done. more info on this can be found here..

DimSaver being flagged by AVG Anti-Virus Free Edition
• Convert a Script to an EXE (ahk2exe)

[jgpaiva]

Or ff you install autohotkey, the only thing you need to do it right-click the .ahk file and select "compile"

[lanux128]

also found instructions on how to report a false positive from these threads on AVG Free/AHK forum..

Re: False positive for Autohotkey v1.0.46.08
Posted by: rdsok - Moderator (IP Logged)
Date: March 11, 2007 04:51AM

So then you need to submit it to Grisoft then...

If you suspect a file to be a false positive. Test the file at [virusscan.jotti.org] and if it is a false positive, archive (zip, arc, tar etc) the file using a password and email a copy to [email protected] with a brief description as well as the password you used to archive it with.

If it is a false positive , turn off hueristic scanning for the time being. When Grisoft adjusts the virus defintions you can turn it back on.

The help on the forum is only from other AVG Free users so we can't do anything to address it but Grisoft can.

-thread

Source(s):
• http://forum.grisoft...rum/read.php?4,93902
• http://www.autohotke...iewtopic.php?t=17163

[Muadib]

Thank you lanux128 and jgpaiva for all the information.

I've tried to turn off the AVG's Heuristic Analysis in the resident and scanning part, but this didn't solve the problem. I think I need to send them the file instead.

I'm glad for all your kind help, but can I ask one more thing? Can you tell me the URL where I can find the DimSaver's AHK code? So I can have a try compiling it.

Thank you again for all.

[lanux128]

you're welcome, Muadib.. the AHK source can be found here.. just click on the 'H' image to save the source..


• DimSaver

[Muadib]

Thanks lanux128!

you're welcome, Muadib.. the AHK source can be found here.. just click on the 'H' image to save the source..
 (see attachment in previous post)• DimSaver

-lanux128 (September 18, 2007, 06:54 PM)

Ahhhh.... now I'm feeling stupid

Sorry for the silly question...

[lanux128]

you're welcome, glad to be of help.. as the cliché goes: there are no silly questions..