'wscript.exe virus?

I am using a VBA macro that uses vbscript and my antivirus software (ZoneAlarm) detects a virus on the following line of code.

Shell "wscript.exe " & strFile & " " & strUploadFile

Has anyone had the same problem? Could it be just a false positive?

EDIT:

This is the VBScript code:

Set WshShell = CreateObject("WScript.Shell")
Do
ret = WshShell.AppActivate("Choose file to upload")
Loop Until ret = True
WScript.Sleep 1000
ret = WshShell.AppActivate("Choose file to upload")
If ret = True Then

 WshShell.Run "cmd.exe /c echo " & WScript.Arguments(0) & "| clip", 0, True
 WScript.Sleep 2000
 WshShell.SendKeys "{TAB}"
 WScript.Sleep 2000
 WshShell.SendKeys "^{v}"
 WScript.Sleep 2000
 WshShell.SendKeys "{TAB}"
 WScript.Sleep 2000
 WshShell.SendKeys "{TAB}"
 WScript.Sleep 2000
 WshShell.SendKeys "{ENTER}"

End If
WScript.Sleep 500
Set WshShell = nothing


Solution 1:[1]

I had a similar problem with my VBS code which got blocked by Windows Defender. I don't know why, but when I changed my code from:

CreateObject("WScript.Shell")

to

WScript.CreateObject("WScript.Shell")

everything was fine.

Solution 2:[2]

  1. Remove your program from quarantine and add it the exception list of ZoneAlarm
  2. Send a False Positive report for your program to Kaspersky. Zone Alarm uses Kasperksy scanning engine. Here is an article on how to submit a file: https://support.kaspersky.com/viruses/answers/1870

Solution 3:[3]

This has happened to me before. VBScript, normally, with WScript.Shell with a shell command to open an app (which could be used a a forkbomb), like in your case, AppActivate, as well as using the batch command clip to copy something to the clipboard, which could be something a virus could use, will normally trigger an Anti virus program, also as VBScript is a script running program.

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 Tomerikoo
Solution 2 Karsten Hahn
Solution 3