forums.wsusoffline.net

1/17/2014 10:05:45 AM G:\Archive\WindowsManagement\wsusoffline89\wsusoffline\client\UpdateInstaller.exe [L] Win32:Evo-gen [Susp] (0)
File was successfully moved to chest...

I can see others had problems with other virus protection systems &
it looks like some fixes have been made (that's as much as my
limited German can get, sorry). Avast rips something out
of the distro (above) & also most of the zip programs don't
like the .89 zip file at all, 7-zip for instance claims it's
unreadable.

I think I'll stay away from this particular update until
I have a better understanding of what's going on.
My clientele is a school & we have to be squeaky clean.

Incidentally, I can't seem to download the zip file anymore - I get an empty file
error.

This alert is definitely a false positiv (caused by a new version of AutoIt).

Please try to update Avast signatures.

Report of virustotal 2014-01-17 21:14:26 UTC; at this Avast reports a clean zip-file.

viewtopic.php?f=4&t=4108

I'd try it again, but avast trashed the zip file, & I can't download it any more:
Chrome:
No data received

Reload Less
Unable to load the webpage because the server sent no data.
Error code: ERR_EMPTY_RESPONSE

Disable Avast for downloading and extracting

Disable Avast for downloading and extracting

I did that, downloaded, & re-enabled avast before unpacking zip.
Result? Same - avast removed an object (see above).
I've got the most recent avast updates in place.

I conclude from this that wsusoffline's current distro is still
not right with avast. Alas, too risky for me.

You have to disable all realtime protection modules in Avast (Avast icon should show red cross in taskbar symbol) to switch-off all possible interfering components. Although that might keep the Browser Add-On still active (which doesn't really work well with Firefox, causing noticable delay).

My Avast realtime protection is disabled and a manual scan of the wsusoffline89.zip with Avast does not detect anything.

Avast stört sich momentan an der UpdateInstaller.exe. Aber nur an der Laufzeitkomprimierung! Ich habe einfach die Skripte mit "/comp 0" statt "/comp 4" übersetzt, und schon ist Ruhe, zumindest bei avast.

I get that I could install if I switched avast off.
That's not a good thing for me to do, because
of my clientele.

The comment about it being somehow associated with the
zip runtime compression (if I understood that correctly) is
interesting. Maybe it's just hiding the "problem" from
avast?

I'd like a more clear result from avast before proceeding,
sorry.