Re: Executable using Gui4Cli.dll

Dimitris

Thank you for all the effort and patience.

I uninstalled Avira Personal addition 2012 and installed another virus program and now the problem is fixed. At work McAfee also does not report a false positive. (It is a headache to uninstall Avirea).

According to me it is definitely Avira causing the frustration.

Regards.

Frans


--- In [email protected], Dimitris Keletsekis <gui4cli@...> wrote:
>
> I use McAfee and I never get an error.
> 
> As you say, maybe the exe itself is the cause, but certainly UPX also
> helps. I tried the test.gui you sent me. With UPX it is reported by 3-4
> antiviruses (on VirusTotal.com) and without UPX it is not reported by any.
> I did a search for "UPX virus" and it seems many others had the same
> problem with other programs.
> 
> Anyway, I left the exe as it is for now, till I understand (if I ever do)
> what the cause is.
> 
> Dimitris
> 
> 
> 
> 
> On Sat, Sep 8, 2012 at 2:52 PM, Marianne <marianne976@...> wrote:
> 
> > **
> >
> >
> > Dimitris
> >
> > Thank you but I just want to mention the following: As said I am using
> > Antivir the 2012 Personal edition (hope I can mention the name). It does
> > not matter if I use upx or not I am getting the false warning. With Normal
> > executables there are no problems.
> >
> > To me it seems that the problem is with the virus program. With the
> > previous version of the same program I do not have any problems. At work we
> > use another virus program and there I also do not have any problems. I
> > tested it also with other virus programs having no problems. It is only the
> > spesific version I am using currently on my Windows 7 computer.
> >
> > It seems to me that I must probably change my virus software. Which one do
> > you prefer or using currently?
> >
> > Kind regards
> >
> >
> > Frans
> >
> > --- In [email protected], Dimitris Keletsekis <gui4cli@> wrote:
> > >
> > > Hi Frans,
> > >
> > > The problem seems to be the UPX compressor. When its not used, the file
> > is
> > > ok.
> > >
> > > I searched the web and this seems to be a known problem with other
> > programs
> > > too.
> > >
> > > So I would avoid it for DLL based exes.
> > > Normal ones, seem to be ok, even with UPX.
> > >
> > > BTW - I uploaded a new version..
> > >
> > > Dimitris
> > >
> > >
> > >
> > > On Fri, Aug 10, 2012 at 10:38 PM, Marianne <marianne976@> wrote:
> > >
> > > > **
> >
> > > >
> > > >
> > > > Thanks for the quick reply.
> > > >
> > > > My results are exactly the same as yours.
> > > >
> > > > Kind regards.
> > > >
> > > > Frans
> > > >
> > > >
> > > > --- In [email protected], Dimitris Keletsekis <gui4cli@> wrote:
> > > > >
> > > > > For me the test exe is shown as a "possible" virus by 3 little known
> > > > > antivir programs. The empty exe is shown as clean. However when I
> > try an
> > > > > old exe test it's shown as clean. It can drive you crazy.
> > > > >
> > > > > The problem is that the exe is basically an empty shell into which
> > you
> > > > > stuff the GUI and the supposedly "clever" algorithms some antivirus
> > use
> > > > > don't know what to make of it and mark it as a "possible" virus to
> > be on
> > > > > the safe side.
> > > > >
> > > > > I think I may have to add some unrelated dummy code, just to bypass
> > this
> > > > > problem...
> > > > >
> > > > > Dimitris
> > > > >
> > > > >
> > > > >
> > > > > On Friday, August 10, 2012, Marianne wrote:
> > > > >
> > > > > > **
> > > >
> > > > > >
> > > > > >
> > > > > > Dimitris
> > > > > >
> > > > > > Sorry it is me again. I think I know what is going on.
> > > > > >
> > > > > > It is an issue of the latest Avira Antivir Free program. I used the
> > > > link
> > > > > > you gave for testing and it is only Antivir that is indicating a
> > > > virus. So
> > > > > > as they called it is a false positive detection (the compiled
> > program
> > > > > > Test.exe).
> > > > > >
> > > > > > I will upload the program to Avira Antivir for their attention.
> > > > > >
> > > > > > Kind regards.
> > > > > >
> > > > > > Frans
> > > > > >
> > > > > > --- In [email protected] <javascript:_e({}, 'cvml',
> > > > > > 'gui4cli%40yahoogroups.com');>, "Marianne" <marianne976@> wrote:
> > > > > > >
> > > > > > > Dimitris
> > > > > > >
> > > > > > > Just to clear up some misunderstanding. Pack_dll.exe is virus
> > free.
> > > > The
> > > > > > problem is when I compile then I get the message that the compiled
> > > > file has
> > > > > > a virus. This only happens when compiling an exe using Gli4Cli.dll
> > > > > > >
> > > > > > > Regards
> > > > > > >
> > > > > > > Frans
> > > > > > >
> > > > > > > --- In [email protected], "Marianne" <marianne976@> wrote:
> > > > > > > >
> > > > > > > > Dimitris
> > > > > > > >
> > > > > > > > Thanks for the reply. I tested the Pack_dll.exe on two
> > different
> > > > > > systems:
> > > > > > > >
> > > > > > > > First system
> > > > > > > > Windows XP SP2
> > > > > > > > Internet Explorer 8
> > > > > > > > Pack_dll.exe modified on 04/07/2012
> > > > > > > > Avira Antivir latest edition (I update once a week).
> > > > > > > > I comipled with no problems. Working fine
> > > > > > > >
> > > > > > > > Second system
> > > > > > > > Windows 7 Home Premium (64 bit)
> > > > > > > > Internet Explorer 9
> > > > > > > > Pack_dll.exe modified on 04/07/2012
> > > > > > > > Avira Antivir latest edition (I update once a week).
> > > > > > > >
> > > > > > > > Cannot compile as I get a virus alert. It compiles but access
> > > > denied.
> > > > > > > >
> > > > > > > > Is it possible that it can be Internet explorer as I use two
> > > > different
> > > > > > versions on the two systems?
> > > > > > > >
> > > > > > > > Hope this will give you more information. I will test again
> > and let
> > > > > > you know if I had made a mistake.
> > > > > > > >
> > > > > > > > Kind regards.
> > > > > > > >
> > > > > > > > Frans
> > > > > > > > ==========================
> > > > > > > > --- In [email protected], Dimitris Keletsekis <gui4cli@>
> > > > wrote:
> > > > > > > > >
> > > > > > > > > Hi,
> > > > > > > > >
> > > > > > > > > I just checked again the PackExe_dll.exe file that I uploaded
> > > > and it
> > > > > > > > > doesn't get flagged as a virus by any antivirus software.
> > You can
> > > > > > check
> > > > > > > > > yourself at this site:
> > > > > > > > >
> > > > > > > > > www.virustotal.com
> > > > > > > > >
> > > > > > > > > Can you tell me which antivirus you are using?
> > > > > > > > >
> > > > > > > > > Maybe you are getting the 2 files mixed up. The old version
> > did
> > > > get
> > > > > > flagged
> > > > > > > > > as a virus (mistakenly) the new one doesn't. Its weird that
> > in
> > > > your
> > > > > > system
> > > > > > > > > its the exact opposite.. Also try renaming the file - maybe
> > it's
> > > > been
> > > > > > > > > blacklisted by name (unlikely, but..)
> > > > > > > > >
> > > > > > > > > Dimitris
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > On Mon, Jul 9, 2012 at 1:41 PM, Marianne <marianne976@>
> > wrote:
> > > > > > > > >
> > > > > > > > > > **
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > Dimitris
> > > > > > > > > >
> > > > > > > > > > Thanks. Enjoy your time away, does not matter if it is
> > work or
> > > > not.
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > Frans
> > > > > > > > > >
> > > > > > > > > > --- In [email protected], Dimitris Keletsekis
> > <gui4cli@>
> > > > > > wrote:
> > > > > > > > > > >
> > > > > > > > > > > That's strange... I changed PackExe_dll.exe so that it
> > > > wouldn't
> > > > > > cause
> > > > > > > > > > this
> > > > > > > > > > > and checked with every antivirus to see that it didn't
> > (there
> > > > > > are sites
> > > > > > > > > > > that do this)
> > > > > > > > > > >
> > > > > > > > > > > The reason it was sometimes marked as a virus was that I
> > had
> > > > > > code in it
> > > > > > > > > > to
> > > > > > > > > > > automatically download gui4cli.dll from the web if not
> > found,
> > > > > > and some
> > > > > > > > > > > antiviruses look for those download functions and
> > > > automatically
> > > > > > mark the
> > > > > > > > > > > program as a Trojan downloader.
> > > > > > > > > > >
> > > > > > > > > > > Anyway, now I'm away. I'll have a look when I get back.
> > > > > > > > > > >
> > > > > > > > > > > Dimitris
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > On Sunday, July 8, 2012, Marianne wrote:
> > > > > > > > > > >
> > > > > > > > > > > > **
> > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > Dimitris
> > > > > > > > > > > >
> > > > > > > > > > > > Sorry, it is me again.
> > > > > > > > > > > >
> > > > > > > > > > > > I did a little testing. It seems to me that
> > > > PackExe_dll.exe is
> > > > > > the
> > > > > > > > > > progam
> > > > > > > > > > > > causing the virus warning.
> > > > > > > > > > > >
> > > > > > > > > > > > If I use the dll of version 19.37 and an old
> > > > PackExe_dll.exe
> > > > > > (version
> > > > > > > > > > > > 19.35) then there is no virus warning but then the
> > original
> > > > > > problem is
> > > > > > > > > > back.
> > > > > > > > > > > >
> > > > > > > > > > > > I just thought that it can be of help to you.
> > > > > > > > > > > >
> > > > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > > >
> > >
> >
> >  
> >
>




------------------------------------

Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/gui4cli/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/gui4cli/join
    (Yahoo! ID required)

<*> To change settings via email:
    [email protected] 
    [email protected]

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/