"Bat to Exe Converter" files detected as false positives

[hexaae]

I've downloaded the useful tool "Bat To Exe Converter" from http://www.f2ko.de/en/b2e.php

It's a useful tool if you want to make EXEs out of BAT files (with icon).

The problem is that any result file gets erroneously detected as malware (attached).

 

Try for example to create a simple bat file to launch a program and attach an icon (.ico) to it (e.g. see my attached Eleusis Game Launcher.exe)

Eleusis Game Launcher.zip

[hexaae]

The Eleusis Game Launcher was created starting from the following RunMe.bat:

Binaries\Win32\UDK.exe ?DX=9?LANG=IT?THREATS=ON -D3D9

 

[AlexSmith]

@hexaae, thanks for posting this!! Also, just letting you know that I moved your thread to our False Positives section.

Edited August 23, 2016 by AlexSmith

[miekiemoes]

Hi,

This is a false positive indeed and will get fixed in next database update.

Thanks for reporting!

[hexaae]

This is valid for the submitted sample only (Eleusis Game Launcher.exe) or in general for all EXEs generated by "Bat to Exe Converter"?

Should I expect more false positives if I compile other BAT -> EXE with that tool?

[miekiemoes]

Hi,

There shouldn't be any issues anymore with this.

[hexaae]

Thanks a lot!

Premium quality service, as always

[hexaae]

Updated MB's signatures...

Unfortunately still detected as a threat an UPX compressed bat to exe:

File: 1Trojan.Shutdown.UPX, E:\SteamLibrary\steamapps\common\Eleusis\Eleusis Game Launcher.exe, , [c385d778089295a1fbb5525aad57a65a], 

https://1drv.ms/u/s!ApMUGr0cuN39-AZa0zuHZMPc7ytS

[hexaae]

Bat to Exe Converter also has a flag option to compress resulting EXEs with UPX...

[miekiemoes]

Hi,

I can't open above link as OneDrive gives a message already that this file contains malware - so blocked access.

I believe most AVs would have a generic detection for above though. So for the latter, we won't remove detection.

[hexaae]

Indeed, any UPX compressed exe has always been a pain for most AVs unfortunately...