heise Security IT security news and services at heise Security UK

Offline Update

Home-made Service Pack

Re: WUP Now being Detected As WORM_DELF.FKZ by Trend Micro Antivirus? 03 June 2008 15:55

This is a false positive alert!
Some AV scanners suspect compiled AutoIt scripts like
UpdateGenerator.exe and UpdateInstaller.exe in general.
To be convinced, you may let your ctupdate4??.zip archive be checked
on VirusTotal (http://www.virustotal.com/) or recompile the scripts
(*.au3) yourself using AutoIt (http://www.autoitscript.com/autoit3/).
In addition, to improve the AV scanner you use, please tell your AV
vendor about the false positive.

RTW