adoxa/ansicon

Trend Micro flags ansicon as malware

llowder opened this issue · 7 comments

Was trying to use a product that uses this, and the anti0virus we use at work kept flagging the product and killing it.

After some investigation, it was determined that the cause was ansicon trying to write to virtual memory.

adoxa commented

Just ran 1.72 through VirusTotal and Trend Micro doesn't complain about that.

When will that version be available? The downloads page has 1.60 as the newest, and while I see v1.72 on the releases page (after clicking "show more..."), it doesn't have the x86 or x64 folders, or the executable, or the dlls or anything like that.

adoxa commented

1.66 is the last full release. The above is the latest (what I was working on before getting sidetracked), which should be stable enough, provided you don't need the x86 version (it will still work with x86 binaries, but not with an x86 OS, unless you load ANSI32.dll directly). I just haven't mustered the energy to get properly back into it, especially since Win10 handles sequences itself (although I'm still on 7, myself).

Still on 7 here as well, at least for work related stuff. Having this release would be really helpful, as it is blocking the use of a dev kit that will really help my make job better and more enjoyable. If you could do a full release it would be really appreciated.

Just to add: On Windows 10, Windows Defender flags this as Trojan: Win32/Tiggre!plock.

OfficeScan 10.02.200 AV under Windows 7 considered 1.66 as malware too. Seems it doesn't like DLL injection in general. No success in 1.83 testing because AV doesn't allow to download it.

OfficeScan just reported 1.85 as trojan, whereas it allowed to download and install 1.84.