AutoHotkey Community

Two suggestions:

First

The download link (a href code) is https://autohotkey.com/download/ahk-install.exe but when you click it you are actually presented with AutoHotkey_1.1.29.01_setup.exe (or latest version exe)
I would change this to the actual filename of the exe (yes that does mean updating the page each time for a new release)

This makes it look "less tricky".

Second

Add a note where the user can find the installer on GitHub. Currently there is one Note. Why not make it two notes like so:

Note 1: The installer also includes an "extract to" function to extract all files without installing. This can be accessed from the installer GUI or on the command line.

Note 2: Your browser or Antivirus software may block the download(s) from this page. This will most likely be a false positive. An alternative download location for the installer is available on official AutoHotkey GitHub page here https://github.com/Lexikos/AutoHotkey_L/releases (look for the AutoHotkey_1.[version number]_setup.exe). When in doubt you can submit the download link(s) to virustotal.com

Wow... this is straight up abuse...

I am able to download AutoHotKey 1.1. without and problems using Google Chrome. I thought new visitors to this forum and this thread might want to know that.

Many thanks to all of you who have worked on this issue!

https://autohotkey.com/download/
Works just fine why are you linking to 1.0?

what do you mean? the main download is the latest version 1.1+
We do have a link lower to v1.0... ?

@joe one of the OP's post is to 1.0...

Oh yeah no, its that v1.0 in particular is having issues. If I click it, I get "The site ahead may contain harmful programs". for the normal downloads, it works just fine.
We now have a notice on the download page linking to this https://autohotkey.com/download/safe.htm
Who ever made it, nice job btw just a small issue, the uninstall link https://autohotkey.com/download/uninstall should be https://autohotkey.com/uninstall

I would like to add that the web browser Firefox is also affected, in addition to Chrome, so will also give false positive warnings about both various versions of AutoHotkey_L and AutoHotkey_H. This includes issuing virus warnings about versions downloaded from GitHub, where the source code is available. Just plain ridiculous. Mozilla is getting information supplied by Google.

Firefox uses Google's blacklist to warn you about "Reported attack sites."

Designating files downloaded from GitHub (with source code), as "malicious" or "malware", makes it difficult on the creators. A person's account on GitHub, isn't the same as a website, so the process they have to go through to get removed off any blacklists is different.

This behavior by Google, where it does not properly verify the validity of it's blacklists, is arguably very unprofessional and reckless. This does a disservice to users, programmers, websites, and GitHub that hosts many applications with easy to inspect and investigate source code. In addition to the Google Safe Browsing process being flawed, one starts to wonder if there is any internal company bias or hidden business agendas for programming languages. The files that Firefox is warning are malicious, via use of Google Safe Browsing Blacklists, come up clean on nearly all virus scanners. So HOW or WHO made the decision to mark various AutoHotkey files as "malicious"? This is an extremely odd disconnect.

The warning message in Firefox looks like the below, just so people can be more aware of this false positive issue and what it looks like. The user can choose to ignore this warning and open the file, though it is likely to scare a lot of people.



You can report false positives, errors, and mistakes made by Google and Firefox with the below links:

https://safebrowsing.google.com/safebro ... illa&hl=en
(can be used for more than reporting false phishing, but false positive and website warning errors)


https://www.stopbadware.org/request-review
(request independent review from Google or StopBadware)


You can also use Google Feedback to report mistakes and errors.

... :/

Hi, I will not put your program for several reasons!
1. The script can not be compiled in Linux
2. To compile V2 you need an exe file! (no one knows what's in it!)
3. I trust Google!

Sorry, but I would not recommend to put your program on your computer.

1. Made specifically for windows. Mac and Linux (have their own version, Automator and AutoKey)
2. The source is readily available AHK binary source: https://github.com/Lexikos/AutoHotkey_L compiler source: https://github.com/fincs/Ahk2Exe You can build completely from source, no binary required.
3. Google spies and profits on everyone's private information and habits.

Finaros wrote: ↑

21 Oct 2018, 06:54

Hi, I will not put your program for several reasons!
1. The script can not be compiled in Linux
2. To compile V2 you need an exe file! (no one knows what's in it!)
3. I trust Google!

Sorry, but I would not recommend to put your program on your computer.

In addition to what Joedf said...

1A. Most Windows based programs can't be compiled in Linux.
1B. Ability to be compiled in Linux is not reason to incorrectly mislabel and misidentify a scripting/programming language.
2A. Most Windows programs exist in .exe form. This by itself is not reason to mislabel or misidentify
2B. The source code of the AutoHotkey "compiler", Ahk2Exe is located here- https://github.com/fincs/Ahk2Exe for all to inspect
3. A person's trust in Google does not mean they are perfect or don't make mistakes.

Chrome:


Virus Total:

False positive.

Chrome is entirely blocking me from downloading the installer at all, and offering no option to bypass the block. False positive, I'm sure, but again - doesn't seem to be a way around it.

MaxAstro wrote: ↑

27 Mar 2020, 11:15

doesn't seem to be a way around it

Well, it's possible by clicking 'Show all' on the right side or whatever it is called in the english version (in german: 'Alle anzeigen)' and confirming to really keep it, but that's an awful solution.

Google seems to get worse by the day.

Thanks, I didn't notice that option.

That really is quite obtuse.

gregster wrote: ↑

27 Mar 2020, 11:24

Google seems to get worse by the day.

Yeah... They have accepted some of my claims in the past (through the google webmaster/console thingy) but they've been denying my more recent ones... :/

So I asked on a Discord server about this.
There is no certificate on www.autohotkey.com
All links on www.autohotkey.com need to be changed to autohotkey.com and the server needs to redirect to autohotkey.com.

nnnik wrote: ↑

29 Mar 2020, 04:50

So I asked on a Discord server about this.
There is no certificate on www.autohotkey.com
All links on www.autohotkey.com need to be changed to autohotkey.com and the server needs to redirect to autohotkey.com.

I believe that originally, Google was giving the warning on autohotkey.com, thus the switch to www.autohotkey.com. However, it appears that Google switched the link that it gives the warning for. By the way, this includes Firefox browsers, in addition to Chrome. So switching between www. or not, probably won't matter now. It looks like you guys are going to have to take on Google.

And, there might be a concerted effort by a group that is purposely causing the issue. With Google's lack of transparency making it even worse. You probably will need to force Google to give exact reasons for such constant detrimental behavior towards your website.

Supposedly, Google is to provide answers at https://search.google.com/search-console/about (Google SearchConsole) their website for web masters to dispute their decisions.