Compiled EXE Disinfected

General Macro Scheduler discussion

Moderators: Dorian (MJT support), JRL

Post Reply
winstein
Pro Scripter
Posts: 82
Joined: Mon Nov 26, 2012 3:44 pm

Compiled EXE Disinfected

Post by winstein » Thu Jun 18, 2020 1:27 pm

Currently using Macro version 14.2.03. However, when I compile the program in Macro, my EXE files disappeared, with my antivirus detecting "VHO:Trojan-Ransom.Win32.Generic". What is the cause of this, and is this issue solved in a future version?

Thank you for reading.
Attachments
Disinfected File.png
Disinfected File.png (21.67 KiB) Viewed 352 times
PPQ

User avatar
Marcus Tettmar
Site Admin
Posts: 7231
Joined: Thu Sep 19, 2002 3:00 pm
Location: Dorset, UK
Contact:

Re: Compiled EXE Disinfected

Post by Marcus Tettmar » Sun Jun 21, 2020 9:22 am

It’s a false positive and a false positive report should be sent to the anti virus maker. It’s also an old version of Macro Scheduler.

It is also common to get AV warnings on executables (whatever technology/product is used to make them) that are unsigned so you may want to consider signing your executables or just whitelist them:

https://www.mjtnet.com/blog/2006/11/09/ ... ed-macros/
Marcus Tettmar
http://mjtnet.com/blog/ | http://twitter.com/marcustettmar

Did you know we are now offering affordable monthly subscriptions for Macro Scheduler Standard?

winstein
Pro Scripter
Posts: 82
Joined: Mon Nov 26, 2012 3:44 pm

Re: Compiled EXE Disinfected

Post by winstein » Fri Jun 26, 2020 7:50 am

So for any applications that are reported, each individual compilation needs to be sent for checking, isn't it? For the certificates, based on what I see those require payment? Are there any alternatives that do not require any sort of subscription?

And if the new version of Macro Scheduler does not return false positives in compiled EXE from Anti-Virus softwares, is there a chance that future versions of Macro Scheduler have false positives in compiled EXEs?
PPQ

User avatar
Marcus Tettmar
Site Admin
Posts: 7231
Joined: Thu Sep 19, 2002 3:00 pm
Location: Dorset, UK
Contact:

Re: Compiled EXE Disinfected

Post by Marcus Tettmar » Tue Jun 30, 2020 4:00 pm

We have no control over anti-virus products. Norton could publish an update which suddenly starts reporting a Macro Scheduler .exe where it didn't before. It's nothing to do with the Macro Scheduler version and completely out of our control.

Not really sure I follow the other part of your question. You only need one authenticate signing certificate. With that you can sign 1 to infinity .exes. Most companies who offer them let you by a cert for a 1 year, 2, 5 or however years. Which you can renew when that period is up. If you want. There's no 'subscription' beyond that I'm aware of. E.g. for Macro Scheduler and all our other tools we have a code signing certificate from Comodo which we renew every 5 years. If I recall it cost less than $200. As a software developer it is an unavoidable and essential cost of doing business. We could not provide software online without one.
Marcus Tettmar
http://mjtnet.com/blog/ | http://twitter.com/marcustettmar

Did you know we are now offering affordable monthly subscriptions for Macro Scheduler Standard?

Post Reply
Sign up to our newsletter for free automation tips, tricks & discounts