Re: Re: Executable using Gui4Cli.dll

Hi Frans,

The problem seems to be the UPX compressor. When its not used, the file is
ok.

I searched the web and this seems to be a known problem with other programs
too.

So I would avoid it for DLL based exes.
Normal ones, seem to be ok, even with UPX.

BTW - I uploaded a new version..

Dimitris



On Fri, Aug 10, 2012 at 10:38 PM, Marianne <[email protected]> wrote:

> **
>
>
> Thanks for the quick reply.
>
> My results are exactly the same as yours.
>
> Kind regards.
>
> Frans
>
>
> --- In [email protected], Dimitris Keletsekis <gui4cli@...> wrote:
> >
> > For me the test exe is shown as a "possible" virus by 3 little known
> > antivir programs. The empty exe is shown as clean. However when I try an
> > old exe test it's shown as clean. It can drive you crazy.
> >
> > The problem is that the exe is basically an empty shell into which you
> > stuff the GUI and the supposedly "clever" algorithms some antivirus use
> > don't know what to make of it and mark it as a "possible" virus to be on
> > the safe side.
> >
> > I think I may have to add some unrelated dummy code, just to bypass this
> > problem...
> >
> > Dimitris
> >
> >
> >
> > On Friday, August 10, 2012, Marianne wrote:
> >
> > > **
>
> > >
> > >
> > > Dimitris
> > >
> > > Sorry it is me again. I think I know what is going on.
> > >
> > > It is an issue of the latest Avira Antivir Free program. I used the
> link
> > > you gave for testing and it is only Antivir that is indicating a
> virus. So
> > > as they called it is a false positive detection (the compiled program
> > > Test.exe).
> > >
> > > I will upload the program to Avira Antivir for their attention.
> > >
> > > Kind regards.
> > >
> > > Frans
> > >
> > > --- In [email protected] <javascript:_e({}, 'cvml',
> > > 'gui4cli%40yahoogroups.com');>, "Marianne" <marianne976@> wrote:
> > > >
> > > > Dimitris
> > > >
> > > > Just to clear up some misunderstanding. Pack_dll.exe is virus free.
> The
> > > problem is when I compile then I get the message that the compiled
> file has
> > > a virus. This only happens when compiling an exe using Gli4Cli.dll
> > > >
> > > > Regards
> > > >
> > > > Frans
> > > >
> > > > --- In [email protected], "Marianne" <marianne976@> wrote:
> > > > >
> > > > > Dimitris
> > > > >
> > > > > Thanks for the reply. I tested the Pack_dll.exe on two different
> > > systems:
> > > > >
> > > > > First system
> > > > > Windows XP SP2
> > > > > Internet Explorer 8
> > > > > Pack_dll.exe modified on 04/07/2012
> > > > > Avira Antivir latest edition (I update once a week).
> > > > > I comipled with no problems. Working fine
> > > > >
> > > > > Second system
> > > > > Windows 7 Home Premium (64 bit)
> > > > > Internet Explorer 9
> > > > > Pack_dll.exe modified on 04/07/2012
> > > > > Avira Antivir latest edition (I update once a week).
> > > > >
> > > > > Cannot compile as I get a virus alert. It compiles but access
> denied.
> > > > >
> > > > > Is it possible that it can be Internet explorer as I use two
> different
> > > versions on the two systems?
> > > > >
> > > > > Hope this will give you more information. I will test again and let
> > > you know if I had made a mistake.
> > > > >
> > > > > Kind regards.
> > > > >
> > > > > Frans
> > > > > ==========================
> > > > > --- In [email protected], Dimitris Keletsekis <gui4cli@>
> wrote:
> > > > > >
> > > > > > Hi,
> > > > > >
> > > > > > I just checked again the PackExe_dll.exe file that I uploaded
> and it
> > > > > > doesn't get flagged as a virus by any antivirus software. You can
> > > check
> > > > > > yourself at this site:
> > > > > >
> > > > > > www.virustotal.com
> > > > > >
> > > > > > Can you tell me which antivirus you are using?
> > > > > >
> > > > > > Maybe you are getting the 2 files mixed up. The old version did
> get
> > > flagged
> > > > > > as a virus (mistakenly) the new one doesn't. Its weird that in
> your
> > > system
> > > > > > its the exact opposite.. Also try renaming the file - maybe it's
> been
> > > > > > blacklisted by name (unlikely, but..)
> > > > > >
> > > > > > Dimitris
> > > > > >
> > > > > >
> > > > > >
> > > > > > On Mon, Jul 9, 2012 at 1:41 PM, Marianne <marianne976@> wrote:
> > > > > >
> > > > > > > **
> > > > > > >
> > > > > > >
> > > > > > > Dimitris
> > > > > > >
> > > > > > > Thanks. Enjoy your time away, does not matter if it is work or
> not.
> > > > > > >
> > > > > > >
> > > > > > > Frans
> > > > > > >
> > > > > > > --- In [email protected], Dimitris Keletsekis <gui4cli@>
> > > wrote:
> > > > > > > >
> > > > > > > > That's strange... I changed PackExe_dll.exe so that it
> wouldn't
> > > cause
> > > > > > > this
> > > > > > > > and checked with every antivirus to see that it didn't (there
> > > are sites
> > > > > > > > that do this)
> > > > > > > >
> > > > > > > > The reason it was sometimes marked as a virus was that I had
> > > code in it
> > > > > > > to
> > > > > > > > automatically download gui4cli.dll from the web if not found,
> > > and some
> > > > > > > > antiviruses look for those download functions and
> automatically
> > > mark the
> > > > > > > > program as a Trojan downloader.
> > > > > > > >
> > > > > > > > Anyway, now I'm away. I'll have a look when I get back.
> > > > > > > >
> > > > > > > > Dimitris
> > > > > > > >
> > > > > > > >
> > > > > > > > On Sunday, July 8, 2012, Marianne wrote:
> > > > > > > >
> > > > > > > > > **
> > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Dimitris
> > > > > > > > >
> > > > > > > > > Sorry, it is me again.
> > > > > > > > >
> > > > > > > > > I did a little testing. It seems to me that
> PackExe_dll.exe is
> > > the
> > > > > > > progam
> > > > > > > > > causing the virus warning.
> > > > > > > > >
> > > > > > > > > If I use the dll of version 19.37 and an old
> PackExe_dll.exe
> > > (version
> > > > > > > > > 19.35) then there is no virus warning but then the original
> > > problem is
> > > > > > > back.
> > > > > > > > >
> > > > > > > > > I just thought that it can be of help to you.
> > > > > > > > >
> > > > > >
> > >
> > >
> >
>
>  
>