If this is your first time using Add2Exchange or you are upgrading or migrating, post here.
my installation doesn't start because of antivirus
I have Kaspersky Enterprise on my SBS2008 server. the setup is blocked from realtime protection sayng that the file contains a troian "trojan.win32.autohk.ih".
What can i do?
Thank you
|
Total Posts
53
Use the links in the footer below to keep up to date via our newsfeed or Facebook.
|
Re: my installation doesn't start because of antivirus
Unfortunately, Kaspersky has an issue with the software we use to generate our downloader (as well as the preinstaller, which is a more essential piece of software).
The good news is that this is a known false positive per the Kaspersky and AutoHotkey forums (autohotkey is the software used to generate the downloader). See these links for details:
It seems that at some point someone wrote a virus using autohotkey and now it is incorrectly flagged by some AV packages. See here for the virus report, which is clearly not an infection in autohotkey in general:
As far as antivirus packages go, we have scanned our software with Microsoft Security Essentials as well as Malwarebytes and they show it as clean. Kaspersky is one of the packages which has been evaluated by reviewers elsewhere as being zealous in identifying false positives, as detailed here:
We are investigating solutions to this issue which will allow us to deliver a package without the false positives. These include removing the UPX packer from our compile chain as well as reimplementing the downloader in another language.
In the meantime, the simplest way to get around the problem is to either temporarily disable AV scanning or to create an exception for our downloader. In the worst case, I can supply you with a direct link to our msi package. Let me know if that will be necessary.
We apologize for the inconvenience. This was news to us.
|
Total Posts
53
Use the links in the footer below to keep up to date via our newsfeed or Facebook.
|
Re: my installation doesn't start because of antivirus
We're pleased to let you know that the latest version of Add2Exchange's downloader is no longer flagged as infected by Kaspersky antivirus. You may still get a warning about "possible hidden behavior", which we are unsure of how that is qualified since all the program does is to open a URL for the package download in your default browser.
In any case, the program has been and continues to be safe, you will just no longer experience these false positives from Kaspersky AV.
|