False Positive detection of my software.

[Shlomikalfa]

Hello,

My name is Mr. Shlomi Kalfa. I am the developer of a program, named (E)Lephant, which is an Internet Download Manager. It has been downloaded 67,423 times and has 62,321 registered members at the moment. On occasion, it has been falsely identified as containing a virus. I assure you it is not a Virus, Trojan, etc., and performs no malicious activities.

(E)Lephant is written in the AutoIt version 3 scripting language. I am sure you are aware that AutoIt has been a valuable tool since 1999, and is used world wide in commercial and non-commercial arenas. Unfortunately, because of it's power, it has been abused by unscrupulous individuals, and on a regular basis innocent programs, like (E)Lephant, are being falsely identified as infected by one virus detection engine or another.

I am writing to learn if there is anything I can do to eliminate, or at least reduce, false positives on my products from your detection engine. Do you have a program in which I may enroll whereby I can submit my programs to aid your efforts in providing quality viral defenses with fewer false positives?

Do you have any advice specific to AutoIt, such as the use, or non-use, of the UPX compressor, etc? Some suggest this is the major cause of false positives as it is used by many programs, not only AutoIt.

I would appreciate your clearing (E)Lephant of this current false positive condition. Please let me know if you require anything else from me.


AutoIt v3 References:

AutoIt v3 Web Site: http://www.autoitscript.com/autoit3/
AutoIt v3 forum discussions on A/V issues: http://www.autoitscript.com/forum/index.php?showtopic=34658&hl=


Sincerely,

Shlomi Kalfa

Email: shlomikalfa@yahoo.com
ICQ: 169461989
WWW: http://sk.online7casino.com/
Download: http://japan-casino.us/sk/E-lephant.0.0.1.1B_04.03_2.rar (RAR password = "elephant")
Forum: http://e-forum.online7casino.com/

[Lisandro]

Sorry for the false positive. They usually correct this soon.
Can you send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.

[CharleyO]

***

You should remove your email address since this is a public forum ... unless you like spam email.


***

[polonus]

Hi Mr. Shlomikalfa,

Your program is not the only one that comes plagued by a possibleFP, various programs that use AutoIt are mistaken to be malware, look here: http://forum.avast.com/index.php?topic=33893.0
But the verdict is not clear, as is shown below: http://applications.prevx.com/appinfo.asp?AXC=AJBG475284-CBHA0
For those amongs us that like to delve further into this program of SK, consider this:
http://www.autoitscript.com/forum/lofiversion/index.php?t43639.html

polonus

[Lisandro]

Of course, I'm thinking you're doing a legit (non-adware) program with auto-it.
Otherwise... sorry, avast detection is correct.
online cassinos do not smell good...