I would appreciate your advice about the Wikipedia section about malware for AutoHotkey, please.
Because AutoHotkey contains many powerful automation tools, it is sometimes used to create malicious software. Given the nature of interpreted languages, this results in a large chunk of the AutoHotkey interpreter (which is not itself malicious) being distributed along with the malicious software. When antivirus vendors try to add the signature of the malware to their databases they often accidentally add the signature of the AutoHotkey interpreter instead, resulting in a false positive.
If you take a look at the article you will notice that two citations are missing. I'd simply like to find articles from reputable sources that support or refute these statements.
- I'm pretty sure AHK is not malware! Is there a source that hits this nail on the head (that was not written by the software's authors or directly derived from their claims)?
- Do anti-malware vendors 'often' (or sometimes) add AHK's signature to their databases mistakenly? And is there a good article that supports this claim?