UniExtractor.exe Is Infected With The MSN.Flooder Virus

Today 5/30/07 after my Norton AntiVirus completed its regular weekly virus definitions update, suddenly I got this warning:
"UniExtractor.exe Is Infected With The MSN.Flooder Virus and has been removed"
Never had any problems until this time.

I know that someone else in this forum has posted an Anti-Virus related issue with Universal Extractor so I'm going to look that post over. However, I just wanted to let everyone know about this.

I am pretty sure that Universal Extractor actually has no viruses in it. However, perhaps the Universal Extractor code should be re-written to address these false-positive readings by Anti-Virus software.

Anonymous (not verified)

Wed, 05/30/2007 - 22:19

..... I have the exact same issue.

Is UniExtractor written using AutoIT?

Norton Antivirus has also detected an AutoIT program which I personally wrote as MSN.Flooder (I am absolutely positive that it is not a virus or MSN Flooder).

I'm not a fan of Norton or any other antivirus program. However as I work on a shared machine, antivirus protection is a necessary evil.

This is, unfortunately, a rather common problem. Please see this post for additional information:
https://www.legroom.net/node/534#comment-184

To address your last point, there really isn't anything I can do to the code to address the issues. It's just the fact that it's written in AutoIt, which uses UPX for compression, that's the problem. AV companies seem to have trouble understanding that not everything compressed with UPX is malware.

Btw, sorry for the delay in response. Been mostly away from my computer lately.

--
http://www.legroom.net/

Add new comment

Filtered HTML

  • Allowed HTML tags: <a href hreflang> <acronym> <blockquote cite> <br> <cite> <code> <dd> <div> <dl> <dt> <em> <img src alt title height width> <li> <ol start type> <p> <pre> <span> <strong> <sub> <sup> <ul type>
  • Lines and paragraphs break automatically.
  • Web page addresses and email addresses turn into links automatically.