Re: Re: Executable using Gui4Cli.dll

I use McAfee and I never get an error.

As you say, maybe the exe itself is the cause, but certainly UPX also
helps. I tried the test.gui you sent me. With UPX it is reported by 3-4
antiviruses (on VirusTotal.com) and without UPX it is not reported by any.
I did a search for "UPX virus" and it seems many others had the same
problem with other programs.

Anyway, I left the exe as it is for now, till I understand (if I ever do)
what the cause is.

Dimitris




On Sat, Sep 8, 2012 at 2:52 PM, Marianne <[email protected]> wrote:

> **
>
>
> Dimitris
>
> Thank you but I just want to mention the following: As said I am using
> Antivir the 2012 Personal edition (hope I can mention the name). It does
> not matter if I use upx or not I am getting the false warning. With Normal
> executables there are no problems.
>
> To me it seems that the problem is with the virus program. With the
> previous version of the same program I do not have any problems. At work we
> use another virus program and there I also do not have any problems. I
> tested it also with other virus programs having no problems. It is only the
> spesific version I am using currently on my Windows 7 computer.
>
> It seems to me that I must probably change my virus software. Which one do
> you prefer or using currently?
>
> Kind regards
>
>
> Frans
>
> --- In [email protected], Dimitris Keletsekis <gui4cli@...> wrote:
> >
> > Hi Frans,
> >
> > The problem seems to be the UPX compressor. When its not used, the file
> is
> > ok.
> >
> > I searched the web and this seems to be a known problem with other
> programs
> > too.
> >
> > So I would avoid it for DLL based exes.
> > Normal ones, seem to be ok, even with UPX.
> >
> > BTW - I uploaded a new version..
> >
> > Dimitris
> >
> >
> >
> > On Fri, Aug 10, 2012 at 10:38 PM, Marianne <marianne976@...> wrote:
> >
> > > **
>
> > >
> > >
> > > Thanks for the quick reply.
> > >
> > > My results are exactly the same as yours.
> > >
> > > Kind regards.
> > >
> > > Frans
> > >
> > >
> > > --- In [email protected], Dimitris Keletsekis <gui4cli@> wrote:
> > > >
> > > > For me the test exe is shown as a "possible" virus by 3 little known
> > > > antivir programs. The empty exe is shown as clean. However when I
> try an
> > > > old exe test it's shown as clean. It can drive you crazy.
> > > >
> > > > The problem is that the exe is basically an empty shell into which
> you
> > > > stuff the GUI and the supposedly "clever" algorithms some antivirus
> use
> > > > don't know what to make of it and mark it as a "possible" virus to
> be on
> > > > the safe side.
> > > >
> > > > I think I may have to add some unrelated dummy code, just to bypass
> this
> > > > problem...
> > > >
> > > > Dimitris
> > > >
> > > >
> > > >
> > > > On Friday, August 10, 2012, Marianne wrote:
> > > >
> > > > > **
> > >
> > > > >
> > > > >
> > > > > Dimitris
> > > > >
> > > > > Sorry it is me again. I think I know what is going on.
> > > > >
> > > > > It is an issue of the latest Avira Antivir Free program. I used the
> > > link
> > > > > you gave for testing and it is only Antivir that is indicating a
> > > virus. So
> > > > > as they called it is a false positive detection (the compiled
> program
> > > > > Test.exe).
> > > > >
> > > > > I will upload the program to Avira Antivir for their attention.
> > > > >
> > > > > Kind regards.
> > > > >
> > > > > Frans
> > > > >
> > > > > --- In [email protected] <javascript:_e({}, 'cvml',
> > > > > 'gui4cli%40yahoogroups.com');>, "Marianne" <marianne976@> wrote:
> > > > > >
> > > > > > Dimitris
> > > > > >
> > > > > > Just to clear up some misunderstanding. Pack_dll.exe is virus
> free.
> > > The
> > > > > problem is when I compile then I get the message that the compiled
> > > file has
> > > > > a virus. This only happens when compiling an exe using Gli4Cli.dll
> > > > > >
> > > > > > Regards
> > > > > >
> > > > > > Frans
> > > > > >
> > > > > > --- In [email protected], "Marianne" <marianne976@> wrote:
> > > > > > >
> > > > > > > Dimitris
> > > > > > >
> > > > > > > Thanks for the reply. I tested the Pack_dll.exe on two
> different
> > > > > systems:
> > > > > > >
> > > > > > > First system
> > > > > > > Windows XP SP2
> > > > > > > Internet Explorer 8
> > > > > > > Pack_dll.exe modified on 04/07/2012
> > > > > > > Avira Antivir latest edition (I update once a week).
> > > > > > > I comipled with no problems. Working fine
> > > > > > >
> > > > > > > Second system
> > > > > > > Windows 7 Home Premium (64 bit)
> > > > > > > Internet Explorer 9
> > > > > > > Pack_dll.exe modified on 04/07/2012
> > > > > > > Avira Antivir latest edition (I update once a week).
> > > > > > >
> > > > > > > Cannot compile as I get a virus alert. It compiles but access
> > > denied.
> > > > > > >
> > > > > > > Is it possible that it can be Internet explorer as I use two
> > > different
> > > > > versions on the two systems?
> > > > > > >
> > > > > > > Hope this will give you more information. I will test again
> and let
> > > > > you know if I had made a mistake.
> > > > > > >
> > > > > > > Kind regards.
> > > > > > >
> > > > > > > Frans
> > > > > > > ==========================
> > > > > > > --- In [email protected], Dimitris Keletsekis <gui4cli@>
> > > wrote:
> > > > > > > >
> > > > > > > > Hi,
> > > > > > > >
> > > > > > > > I just checked again the PackExe_dll.exe file that I uploaded
> > > and it
> > > > > > > > doesn't get flagged as a virus by any antivirus software.
> You can
> > > > > check
> > > > > > > > yourself at this site:
> > > > > > > >
> > > > > > > > www.virustotal.com
> > > > > > > >
> > > > > > > > Can you tell me which antivirus you are using?
> > > > > > > >
> > > > > > > > Maybe you are getting the 2 files mixed up. The old version
> did
> > > get
> > > > > flagged
> > > > > > > > as a virus (mistakenly) the new one doesn't. Its weird that
> in
> > > your
> > > > > system
> > > > > > > > its the exact opposite.. Also try renaming the file - maybe
> it's
> > > been
> > > > > > > > blacklisted by name (unlikely, but..)
> > > > > > > >
> > > > > > > > Dimitris
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > On Mon, Jul 9, 2012 at 1:41 PM, Marianne <marianne976@>
> wrote:
> > > > > > > >
> > > > > > > > > **
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Dimitris
> > > > > > > > >
> > > > > > > > > Thanks. Enjoy your time away, does not matter if it is
> work or
> > > not.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Frans
> > > > > > > > >
> > > > > > > > > --- In [email protected], Dimitris Keletsekis
> <gui4cli@>
> > > > > wrote:
> > > > > > > > > >
> > > > > > > > > > That's strange... I changed PackExe_dll.exe so that it
> > > wouldn't
> > > > > cause
> > > > > > > > > this
> > > > > > > > > > and checked with every antivirus to see that it didn't
> (there
> > > > > are sites
> > > > > > > > > > that do this)
> > > > > > > > > >
> > > > > > > > > > The reason it was sometimes marked as a virus was that I
> had
> > > > > code in it
> > > > > > > > > to
> > > > > > > > > > automatically download gui4cli.dll from the web if not
> found,
> > > > > and some
> > > > > > > > > > antiviruses look for those download functions and
> > > automatically
> > > > > mark the
> > > > > > > > > > program as a Trojan downloader.
> > > > > > > > > >
> > > > > > > > > > Anyway, now I'm away. I'll have a look when I get back.
> > > > > > > > > >
> > > > > > > > > > Dimitris
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > On Sunday, July 8, 2012, Marianne wrote:
> > > > > > > > > >
> > > > > > > > > > > **
> > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > Dimitris
> > > > > > > > > > >
> > > > > > > > > > > Sorry, it is me again.
> > > > > > > > > > >
> > > > > > > > > > > I did a little testing. It seems to me that
> > > PackExe_dll.exe is
> > > > > the
> > > > > > > > > progam
> > > > > > > > > > > causing the virus warning.
> > > > > > > > > > >
> > > > > > > > > > > If I use the dll of version 19.37 and an old
> > > PackExe_dll.exe
> > > > > (version
> > > > > > > > > > > 19.35) then there is no virus warning but then the
> original
> > > > > problem is
> > > > > > > > > back.
> > > > > > > > > > >
> > > > > > > > > > > I just thought that it can be of help to you.
> > > > > > > > > > >
> > > > > > > >
> > > > >
> > > > >
> > > >
> > >
> > >
> > >
> >
>
>  
>