• You are not logged in.

    AutoIt.100 Trojan in Colemak 1.0?

    • Started by laughfactory
    • 2 Replies:
    • Reputation: 0
    • Registered: 11-Jan-2007
    • Posts: 2
    11-Jan-2007 02:03:45#1 AutoIt.100 Trojan in Colemak 1.0?

    Hi there, I'm doing my due diligence after getting a report from the Trojan Hunter software that the Colemak 1.0 installer includes a trojan virus.

    Here's the report from Trojan Hunter:

    Found trojan file: C:\Documents and Settings\Abe\Desktop\Colemak-1.0\install.exe (Autoit.100)
    Found trojan file: C:\Documents and Settings\Abe\Desktop\Colemak-1.0\uninstall.exe (Autoit.100)
    Found trojan file: C:\Documents and Settings\Abe\Desktop\Colemak-1.0.zip/install.exe (Autoit.100)
    Found trojan file: C:\Documents and Settings\Abe\Desktop\Colemak-1.0.zip/uninstall.exe (Autoit.100)


    Can anyone tell me why Trojan Hunter thinks these files are trojans? Otherwise I'm taking Colemak off my system ASAP.

    Offline
    • 0
    • Shai
    • Administrator
    • Reputation: 36
    • Registered: 11-Dec-2005
    • Posts: 423
    11-Jan-2007 05:25:16#2 Re: AutoIt.100 Trojan in Colemak 1.0?

    I've created The installer EXE with AutoIt, which is a very nice scripting tool for Windows, and it allows to compile the script into an EXE. Trojan Hunter assumes incorrectly that every AutoIt executable is a trojan.

    If you want to inspect the source code of the executable, the AutoIt installation includes a decompiler utility called Exe2Aut.exe . You can check for yourself it does nothing evil.

    For the next version of the installer I'm planning to use NSIS instead of AutoIt, so there won't be false alarms (among other reasons).

    Offline
    • 0
    • Reputation: 0
    • Registered: 11-Jan-2007
    • Posts: 2
    11-Jan-2007 06:56:37#3 Re: AutoIt.100 Trojan in Colemak 1.0?

    Thank you for the info. I suspected it must be something like that. Thanks again!

    Regards,

    Abe

    Offline
    • 0