Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: Autohotkey.exe...... a virus or not?

  1. #1
    Join Date
    Jan 2008
    Location
    Datil, NM
    Beans
    276
    Distro
    Kubuntu 16.04 Xenial Xerus

    Autohotkey.exe...... a virus or not?

    I have avast for Linux and every time I run it, it identifies autohotkey.exe as a virus. Is it a known virus or is this a false virus identification? I don't use it and so I delete it, but it keeps reappearing in the next scan. Is it because of the ubuntu updates I do almost every morning?


  2. #2
    Join Date
    Oct 2007
    Location
    Europe
    Beans
    3,564
    Distro
    Ubuntu 12.10 Quantal Quetzal

    Re: Autohotkey.exe...... a virus or not?

    Quote Originally Posted by Greg Mueller View Post
    I have avast for Linux and every time I run it, it identifies autohotkey.exe as a virus. Is it a known virus or is this a false virus identification? I don't use it and so I delete it, but it keeps reappearing in the next scan. Is it because of the ubuntu updates I do almost every morning?

    where do you find this autohotkey.exe file? pen drive, wine drive or where?

  3. #3
    Join Date
    Jan 2008
    Location
    Datil, NM
    Beans
    276
    Distro
    Kubuntu 16.04 Xenial Xerus

    Re: Autohotkey.exe...... a virus or not?

    It's a pretty long string but it starts out with

    /USR/SHARE/WINE-DOORS/BASE.REPO/AUTOHOTKEY-1.04.46-08/

    and winds up with AUTOHOTEKEY.EXE

    I've looked with the file manager but I can't find anything (at least it does not show anything) past AUTOHOTKEY-1.04.46-08

    I have avast move it to a folder where it renames it adding a "vir" suffix to the file name. I can delete it there (with the file manager) but not with avast, where it says it is located (which I can't see when I look).

    Can I un-install the whole autohokey program (since I don't use it anyway)?

  4. #4
    Join Date
    Apr 2008
    Location
    Houston, TX USA
    Beans
    589
    Distro
    Ubuntu

    Re: Autohotkey.exe...... a virus or not?

    It is a Windows application that is used to automate the interface. You installed it via wine-doors for some reason. The application is opensource and has legitimate uses, though I can easily imagine a virus or other type of malware using it (or something that functions similarly) to steal or wreak havoc.

    Just uninstall it via wine-doors if the AV message bothers you.
    Locke
    Try Dropbox, it's FREE! (gratis) http://db.tt/J7Sm9iC
    Try Dropbox experimental build updater http://forums.dropbox.com/topic.php?id=12153

  5. #5
    Join Date
    Oct 2007
    Location
    Europe
    Beans
    3,564
    Distro
    Ubuntu 12.10 Quantal Quetzal

    Re: Autohotkey.exe...... a virus or not?

    Quote Originally Posted by Greg Mueller View Post
    It's a pretty long string but it starts out with

    /USR/SHARE/WINE-DOORS/BASE.REPO/AUTOHOTKEY-1.04.46-08/

    and winds up with AUTOHOTEKEY.EXE

    I've looked with the file manager but I can't find anything (at least it does not show anything) past AUTOHOTKEY-1.04.46-08

    I have avast move it to a folder where it renames it adding a "vir" suffix to the file name. I can delete it there (with the file manager) but not with avast, where it says it is located (which I can't see when I look).

    Can I un-install the whole autohokey program (since I don't use it anyway)?
    can you uninstall the autohotkey program? ins't it part of wine-doors?
    well the AUTOHOTEKEY.EXE file is a microsoft windows system file but sometimes it can be a fake infected file (virus) maybe theres nothing wrong with this file if it belongs to the wine-doors installation, in this case it would be a false positive.
    I would recommend uninstall the whole wine-doors application and install playonlinux instead which is much better the wine-doors, wine-doors is old! and is it still supported?

  6. #6
    Join Date
    Jan 2008
    Location
    Datil, NM
    Beans
    276
    Distro
    Kubuntu 16.04 Xenial Xerus

    Re: Autohotkey.exe...... a virus or not?

    I uninstalled it via wine-doors and rebooted and now I scan clean.

    I feel better now.
    Thanks guys

  7. #7
    Join Date
    Jan 2008
    Location
    Datil, NM
    Beans
    276
    Distro
    Kubuntu 16.04 Xenial Xerus

    Re: Autohotkey.exe...... a virus or not?

    Well I guess I didn't uninstall it. It's back.
    So I uninstalled Wine and tried attacking it that way.
    I will look into playonlinux, thanks

    Is there a cleaner program that will go through and delete uninstalled program files and old bits?

  8. #8
    Join Date
    Apr 2008
    Location
    Houston, TX USA
    Beans
    589
    Distro
    Ubuntu

    Re: Autohotkey.exe...... a virus or not?

    I've heard BleachBit is supposed to be pretty decent at that sort of thing, though I've never used it.

    apt-get autoremove, autoclean, and clean, and Ubuntu Tweak have always been good enough for my needs.
    Locke
    Try Dropbox, it's FREE! (gratis) http://db.tt/J7Sm9iC
    Try Dropbox experimental build updater http://forums.dropbox.com/topic.php?id=12153

  9. #9
    Join Date
    Dec 2009
    Beans
    547

    Re: Autohotkey.exe...... a virus or not?

    Autohotkey is arguably one reason not to use linux. It is a basic like programming language and macro recorder. You can compile exes that are distributable. Like ftp.exe, some antivirus programs flag autohotkey and compiled scripts--erroneously--as viruses or keyloggers. But many freeware programs are increasingly written in ahk (autohotkey), like magicblock.

    I guess the language is too easy and too powerful, so must be a viral. You will scan with differing versions of Avast, I bet the latest will not flag it. Take any 14 and 3 or 4 will flag. and if upx packed, at least 5.

    BTW. no av can actually see signatures, as most exes are compressed and encypted. Furthermore, they have no idea what routines the programmer is doing. You are best off having a good firewall, application firewall, secure browser, windows updater turned on. Commercial AV is largely a scam to get your $60 a year, and ineffective at best for above reason, also seldom is anything they scan for, actually in the wild. They all do certainly slowdown the system. I have got barely used 2 gighz systems for free because they cannot run the modern resident scanners without totally bogging down.
    ~~The Linux directory system is a messy desk of a genius-- ahh, /home at last!

    ~~Once a person gets used to anything, they become blind to it. Me, I'm seeing spots.

  10. #10
    Join Date
    Dec 2009
    Beans
    547

    Re: Autohotkey.exe...... a virus or not?

    More than likely the reason the autohotkey.exe is reappearing is some other exe of this language on which you are relying on and running, is extracting the autohotkey.exe . Now, ahk scripts can be fed to the autohotkey.exe via the commandline, which allows a ton more power and to spawn paralleling processes, since ahk cannot multithread. Kinda like the power of the python engine in only 200k. This also allows an end user to have an open source program, that they can inspect and modify.

    i recommend not going to AV people who are clueless and goto autohotkey.com and post the exe in their forum. They could tell you if it is the real thing and what version it is.
    Last edited by degarb; January 3rd, 2011 at 10:26 PM.
    ~~The Linux directory system is a messy desk of a genius-- ahh, /home at last!

    ~~Once a person gets used to anything, they become blind to it. Me, I'm seeing spots.

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •