Major Issue with AVE Desk 1.3

I have a had two issues with Ave since its install about two weeks ago...

1) AutoHotKey.exe which was found in the AVE DESK>Desklets...>MorphDock Program Directory file, after installing was found and detected as a Win32/Trojan

2) I found three Items in AveScripter which when added created a file... C:/program...without an extension which came to be a text file... On reboot of the system it was detected and renamed as it interfered with about three applications as detected by Windows XP SP2...The three extensions are..

deskletlist

desklitvis

groupvis

Deskletlist was started without a problem but showed nothing...

Deskletvis when started created the file which was to be used as a configuration file and was put directly into the hard drive; instead of being put into AVEDESK or something; opened notepad immediately to show the file...

Groupvis ask to create the same file in the same identical way..

It really surprised me as I was using the main site to find and download additional tools, Desklets and Docklets for Systats...( which I might passingly mention is a little user unfriendly along the accessibility side of the track )

So HELP!...am I simply a one in a million case which has had this Trojan/Program killing effect ...

Am I a victim of pharming..( some of you don't know is a way to poison a DNS server, much like phishing )

Or did I just simply do something incredibly wrong? Which caused the two incidences?

Thank You for your time and looking forward to the next release....of AVE Desk

#466750

Number one isn't a trojan or virus. AutoHotKey has been around along time. So, that's a false postive. Is it Windows Defender picking that up?

The three extensions I can't help you on as I don't have them but, they may be associated with Morphdock?

#466752

Hi there -

AutoHotKey is a free OpenSource utility, I included the AutoHotKey.exe in MorphDock to make some extra features possible.

There's no Virus in it for sure - I think some AV mark it as positive as it - like the name suggests - can send and record key commands. If you want to know more about it, here's the homepage, it's source code is available, so anyone can check it for threats:

http://www.autohotkey.com/

There's also a thread here at Aquasoft regarding Landvermesser's Finderbar, that includes AutoHotkey, too - it's mentioning the issue some (very few) AV apps have with AHK.

Regarding deskletlist, deskletvis and groupvis:

They are "help desklets" that also come with MorphDock - they are not supposed to be run as a single app but only within Morphock.

What they do:

Deskletlist creates a list of all running desklets on your desktop - these then can be shown and hidden via deskletvis and groupvis by MorphDock: deskletvis recognizes a desklet by its label, groupvis by the GID effectlet of dreadnaut.

I had to create these as MorphDock is written in VBS, but the control of other desklets at the moment is - when using script - only possible with JScript.

That's why these desklets aren't available as single downloads on the main site - they're just for use with MorphDock...

There's some additional information about AHK and the show/hide feature of MorphDock available with the download:

http://www.deviantart.com/deviation/45118777/

Hope this was some help...

#466760

Thanks for the info..greatly appreciated..

Windows Defender was not the one, actually it was ESET NOD32...

Its a wonderful little program that monitors file activity as well as known names, among all the options..It detected the ability for the EXE to send and record the key commands...So yes true, false positive..LOL

But yeah love the NOD32...

I had run SpyBOT S&D, and Sophos as well...and had not noticed anything major...Kind of thought that possibly was the case but you can never be too sure.

#466763