'wscript.exe virus?
I am using a VBA macro that uses vbscript and my antivirus software (ZoneAlarm) detects a virus on the following line of code.
Shell "wscript.exe " & strFile & " " & strUploadFile
Has anyone had the same problem? Could it be just a false positive?
EDIT:
This is the VBScript code:
Set WshShell = CreateObject("WScript.Shell")
Do
ret = WshShell.AppActivate("Choose file to upload")
Loop Until ret = True
WScript.Sleep 1000
ret = WshShell.AppActivate("Choose file to upload")
If ret = True Then
WshShell.Run "cmd.exe /c echo " & WScript.Arguments(0) & "| clip", 0, True
WScript.Sleep 2000
WshShell.SendKeys "{TAB}"
WScript.Sleep 2000
WshShell.SendKeys "^{v}"
WScript.Sleep 2000
WshShell.SendKeys "{TAB}"
WScript.Sleep 2000
WshShell.SendKeys "{TAB}"
WScript.Sleep 2000
WshShell.SendKeys "{ENTER}"
End If
WScript.Sleep 500
Set WshShell = nothing
Solution 1:[1]
I had a similar problem with my VBS code which got blocked by Windows Defender. I don't know why, but when I changed my code from:
CreateObject("WScript.Shell")
to
WScript.CreateObject("WScript.Shell")
everything was fine.
Solution 2:[2]
- Remove your program from quarantine and add it the exception list of ZoneAlarm
- Send a False Positive report for your program to Kaspersky. Zone Alarm uses Kasperksy scanning engine. Here is an article on how to submit a file: https://support.kaspersky.com/viruses/answers/1870
Solution 3:[3]
This has happened to me before. VBScript, normally, with WScript.Shell with a shell command to open an app (which could be used a a forkbomb), like in your case, AppActivate, as well as using the batch command clip to copy something to the clipboard, which could be something a virus could use, will normally trigger an Anti virus program, also as VBScript is a script running program.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | Tomerikoo |
| Solution 2 | Karsten Hahn |
| Solution 3 |
