Avast cyber capture detection

[kingzooly]

Is there any way to detect cyber capture or what ever they call it, it damages my app on the first launcher, I have a game made in AMS what changes the screen size as it needs to as AMS can't resize right sadly but it's not a game engine, there are 1000's of games still that request windows to change it's size so I not worried there.

My problem is cyber capture does not close the app normal it terminates it so if the screen size has changed it wont trigger the screen size to return, so the end user then blames us for damaging there system but it was Avast I emailed them about this a few years back and they said they was going to change they way they handle it but never did, I stuck and really miffed as it's making me look like a n00bish git.

I can't even sign the software anymore as all the sign tools what used to work don't or I have to run about downloading 100's of stuff what's not acceptbled and the free/open source carts I used to get are no longer around you still have to pay for them, so this means people like myself that just want to make small fun free apps are out of luck, THO cyber capture does not even read the signed exe, it's a requested function not yet added as I found out.

Any ideas on how to work around this?

[BioHazard]

I think the closest you're likely to come would be to use the sample code Reteset left us for retreiving antivirus details via WMI / Luacom, here.

Nb.
Example attached below.
Requires Luacom plugin

I know it's not exactly what you're looking for, Rexxy..But it's a fine piece of code. And you could adapt it, to trigger a warning-message if it identifies Avast on the user's system. Which directs the user to:

• i) visit: https://support.avast.com/en-eu/arti...s-CyberCapture
• ii) manually disable CyberCapture before proceeding

Clumsy way to do it, I know. But otherwise, you're going to have to figure a way to access the info directly from the WMI. And I think you'll have a hard time with that on 64-bit systems, as indicated here.

Have u checked in Scriptomatic v1.3? To see whether you can access this info from the WMI? Scriptomatic v1.3 here if u haven't checked yet:

The closest I could find with it, is what's already in reteset's code above.
Sorry, Rex. Maybe u can see something in there that I can't?

[kingzooly]

I have taken a better step to just flag all first runs as a Cyber Capture mode, this will also help it for other AV's doing it, I will give this a good look tho later, I got home from seeing a friend to having to fix house m8's PC to then next few days packing, the Novel Game Clone is just a bit of fun.

Worse still my 2TB drive just failed on me so I just lost every AMS app I made and extra plugin didn't have installed from the last 10 years YAY or well


Edit:
The example opens fine with no errors but when I click extracted it does not work, so not sure if it's windows 10 or what lol

[BioHazard]

... so not sure if it's windows 10 or what lol

LMAO! The "version" monster strikes again.
Well, when it runs, it'll just look something like this ...



But it's just a virtual copy/paste of reteset's code (linked to above). So anyone can build it for themselves if they need it.

As I mentioned above though, it seems the WMI is not picking up Avast on 64 bit systems. A quick google-search on the topic reveals that it seems to be an area of annoyance for a lot of people. Go figure, eh? Hooray for Avast - annoying the crap out of a whole new generation. LOL.

God, I love reteset's code - really wish he was still here!
Have u noticed how all the best code is stashed away down in the AMS v7.5 subforum? Where hardly anyone bothers to go anymore?

PS.
Hey, don't throw out your 2TB drive just yet. You might be able to retrieve some of your stuff with some forensic recovery-software. LOL - and a lot of patience!

And if it's any consolation, there's only 2 kinds of people in this world: LOL - those who've lost all their data. And those who're ABOUT to lose all their data!

[kingzooly]

PS.
Hey, don't throw out your 2TB drive just yet. You might be able to retrieve some of your stuff with some forensic recovery-software. LOL - and a lot of patience!

And if it's any consolation, there's only 2 kinds of people in this world: LOL - those who've lost all their data. And those who're ABOUT to lose all their data!

I am not going to bin it, I am going to keep it, I think it's the controller board that as gone, the reading arms seems to be doing there job, but the controller to the computer
is not working so I might get another purple drive and swop the controllers over so I can atlest recover my drive.