Lavasoft Support Forums > How to prevent adaware from blocking a program

spot6224

Oct 14 2009, 12:47 AM

Hi

i am using autohotkey, a scripting language/program. Ofcourse every adware and virusprogram sees it as a hacktool, but i wrote it myself so i know its safe.

But i cant get adaware to accept it (and im starting to get crazy about it now..

)

I have one script for my volume control, which i somehow got accepted by adware. I have it in processrules set to accept.
[process:autohotkey.exe, tai:3, action:accept, family:win32.hacktool.w... , cat:misc]

but when i now start another script, it blocks it the moment it starts. While the process for this thing is also called autohotkey.exe...
if i put the rule on inform, i get the popup-message that it is blocked when i start the script. And if i turn adware off it just works.

How do i add this to be accepted? (and i have a lot more of those scripts..)

The helpfile is really hopeless about this, it doesn't even say anything about adding rules, only about removing them

and the 'detailed' log exp. (what does this stand for anyway? please don't use abbreviations without explaining them..) only gives me
"MSG [4640] 2009/10/14 01:40:17: C:\program files\autohotkey\autohotkey.exe (diagnosis: Malware family: Win32.Hacktool.WinSpy) => Block"

yeah great i already know it is being blocked...

LS Albin

Oct 14 2009, 08:40 AM

QUOTE(spot6224 @ Oct 14 2009, 01:47 AM)

Hi

i am using autohotkey, a scripting language/program. Ofcourse every adware and virusprogram sees it as a hacktool, but i wrote it myself so i know its safe.

But i cant get adaware to accept it (and im starting to get crazy about it now..

)

I have one script for my volume control, which i somehow got accepted by adware. I have it in processrules set to accept.
[process:autohotkey.exe, tai:3, action:accept, family:win32.hacktool.w... , cat:misc]

but when i now start another script, it blocks it the moment it starts. While the process for this thing is also called autohotkey.exe...
if i put the rule on inform, i get the popup-message that it is blocked when i start the script. And if i turn adware off it just works.

How do i add this to be accepted? (and i have a lot more of those scripts..)

The helpfile is really hopeless about this, it doesn't even say anything about adding rules, only about removing them

and the 'detailed' log exp. (what does this stand for anyway? please don't use abbreviations without explaining them..) only gives me
"MSG [4640] 2009/10/14 01:40:17: C:\program files\autohotkey\autohotkey.exe (diagnosis: Malware family: Win32.Hacktool.WinSpy) => Block"

yeah great i already know it is being blocked...

Hi spot6224!

Can you please upload the detected files in this thread?

Here is the procedure for uploading files and false positive reports:

http://www.lavasoftsupport.com/index.php?showtopic=18033

Cheers

Albin

Lavasoft Malware Labs

spot6224

Oct 14 2009, 11:00 AM

here you can find the download for autohotkey:
http://www.autohotkey.com/download/

LS Albin

Oct 14 2009, 02:17 PM

QUOTE(spot6224 @ Oct 14 2009, 12:00 PM)

here you can find the download for autohotkey:
http://www.autohotkey.com/download/

Hi !

I downloaded the installation package located at http://www.autohotkey.com/download/AutoHotkeyInstall.exe. Ad-Aware didn't detect anything. The file version on AutoHotkey.exe is (1,0,48,05). Which file version are you using? I can also see from your log report that an old definition file (0149.0063) is used during the scan. Please download the latest software updates and definition file (0149.0071).

Thanks for your detailed report.

Regards

Albin

MarkJL

Nov 11 2009, 03:21 AM

QUOTE(spot6224 @ Oct 13 2009, 06:47 PM)

How do i add this to be accepted? (and i have a lot more of those scripts..)

The helpfile is really hopeless about this, it doesn't even say anything about adding rules, only about removing them

I would also like to know how to Add something to the Ignore List.

Thank you.

- Mark