windowsautohotkeysymantec

Heur.AdvML.B appears when .exe is generated from Ahk file

I try to generate exe file from ahk project file. I use Ahk2Exe v1.1.30.03_Beta_9.

Ahk file, which should paste file path to browser's file chooser dialog window:

#NoEnv  ; Recommended for performance and compatibility with future AutoHotkey releases.
; #Warn  ; Enable warnings to assist with detecting common errors.
SendMode Input  ; Recommended for new scripts due to its superior speed and reliability.
SetWorkingDir %A_ScriptDir%  ; Ensures a consistent starting directory.

#Persistent

SetTimer, test, 500
return

test:

IfWinExist, Open
{
    WinActivate  ; Automatically uses the window found above.
    WinMaximize  ; same
    Send, ^v .{Enter}
    return
}

Symantec Endpoint Protection is blocking access to it with following reason:

Scan type: Auto-Protect Scan Event: Security Risk Found! Security risk detected: Heur.AdvML.B

Solution

  • I see you're using the ahk2exe pre-release ;)

    Unless your system has been compromised, this is very likely a false positive. You could try redownloading it, and compiling again:

    That said, you can refer to the following documentation on AutoHotkey false positives: