nsExec::ExecToStack will be blocked by Trend Micro OfficeScan

gan.gary · 21st February 2009, 03:19

In order to supress the console window when calling a batch file. NSIS provide a command: nsExec::ExecToStacknsExec::ExecToStack .

Refcently, the Trend Micro OfficeScan seems detect another Trojan TROJ_DROPPER.GDM Trojan TROJ_DROPPER.GDM that might doing the similar thing, thus
nsExec::ExecToStack will be blocked by Trend Micro OfficeScan.

Any alternative?

Animaether · 21st February 2009, 04:08

perhaps execDos?

Best bet, though, is to e-mail Trend Micro and tell them were to pick up a sample installer source, executable and the nsExec DLL source. They should then be able to add it to a whitelist.

That said, if it's one of those newfangled 'zomg those cookies are MALWARE!!!!!!' products, then they may very well have a hard stance that -any- suppressing of windows will be flagged.

Should contact them, either way, though

gan.gary · 21st February 2009, 05:49

thanks, it could be the options. Asking user to add it to whitelist of AV could be impossible. Just afraid this plugin might cause another similar issue next time, since it's an commercial application. Is it a freeware? I found no EULA there.

kichik · 21st February 2009, 09:18

Nothing we can do could ever fix all of the already existing installers using nsExec. It's Trend's bug to fix and it's their product's compatibility with the hundreds of installers using nsExec. Your best and pretty much only choice here is to have them fix this.

gan.gary · 23rd February 2009, 01:01

Thanks, what about license issue? Nothing mentioned in Wiki page: http://nsis.sourceforge.net/ExecDos

kichik · 23rd February 2009, 06:18

If it's not mentioned, it's zlib like NSIS itself. But the license has nothing to do with this issue.

gan.gary · 23rd February 2009, 07:58

sorry, I confused you. I was trying to say I am gonna use it in commercial app. It'd be a grey area if it's not specified. It could not be found here: http://nsis.sourceforge.net/User:Takhir

I think I gotta contact him directly: http://forums.winamp.com/memberlist.php?s=&action=getall&what=username&ltr=T&perpage=100&orderby=username&ausername=&homepage=&icq=&aim=&yahoo=&joindateafter=&joindatebefore=&lastpostafter=&lastpostbefore=&postslower=&postsupper=&direction=ASC&pagenumber=5

Takhir · 23rd February 2009, 13:47

'There are no new private messages since your last visit.'
OK, ExecDos is free for any use like NSIS itself

gan.gary · 24th February 2009, 02:47

Great, tq. I prefer any document in black in white, so that I can release it with my app's EULA.

Or is it applicable to: (http://nsis.sourceforge.net/License)

Applicable licenses
All NSIS source code, plug-ins , documentation, examples, header files and graphics, with the exception of the compression modules and where otherwise noted, are licensed under the zlib/libpng license.
The zlib compression module for NSIS is licensed under the zlib/libpng license.
The bzip2 compression module for NSIS is licensed under the bzip2 license.
The lzma compression module for NSIS is licensed under the Common Public License version 1.0.

and since it's CPL v1, I subjected to this (http://www.ibm.com/developerworks/library/os-cplfaq.html) ?

Can I take a Program licensed under the CPL, compile it without modification, and commercially license the result?
Yes. You may compile a Program licensed under the CPL without modification and commercially license the result in accordance with the terms of the CPL.

Do I need to include the source code for such Program with the object code distribution?
No. But you do need to include a statement that the source code is available from you and information on how to obtain it.

Actually I sent the mail to this add: 'ineum@narod.ru'

Anders · 24th February 2009, 03:22

I know I talked about this with kichik on IRC a while back, can't find it in my logs ATM. But yes, anything on the wiki that does not have its own license is zlib. Why http://nsis.sourceforge.net/License does not include parts about the wiki, I don't know, maybe "plug-ins , documentation, examples" covers it (IANAL,TINLA)

gan.gary · 24th February 2009, 04:31

I think I overlooked. If it's released under zLib, then it'd be GPL (http://www.zlib.net/zlib_license.html, http://en.wikipedia.org/wiki/Zlib_License), instead of CPL.

If it's GPL v2, does it mean zlib, NSIS, execDos cannot be used as proprietry software (http://www.gnu.org/licenses/old-licenses/gpl-2.0.html) ?

This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License.

Anders · 24th February 2009, 06:34

no, zlib is not the same as GPL. It is _compatible_ with the GPL, but it also does not have the same restrictions that GPL has (IANAL)

gan.gary · 24th February 2009, 08:13

meant it's neither CPL nor GPL? then thanks. I just attach the zlib license.

21st February 2009, 03:19	#1
gan.gary Junior Member Join Date: Feb 2009 Posts: 7	nsExec::ExecToStack will be blocked by Trend Micro OfficeScan In order to supress the console window when calling a batch file. NSIS provide a command: nsExec::ExecToStacknsExec::ExecToStack . Refcently, the Trend Micro OfficeScan seems detect another Trojan TROJ_DROPPER.GDM Trojan TROJ_DROPPER.GDM that might doing the similar thing, thus nsExec::ExecToStack will be blocked by Trend Micro OfficeScan. Any alternative?

21st February 2009, 09:18	#4
kichik M.I.A. [NSIS Dev, Mod] Join Date: Oct 2001 Location: Israel Posts: 11,337	Nothing we can do could ever fix all of the already existing installers using nsExec. It's Trend's bug to fix and it's their product's compatibility with the hundreds of installers using nsExec. Your best and pretty much only choice here is to have them fix this. NSIS FAQ \| NSIS Home Page \| Donate $ "I hear and I forget. I see and I remember. I do and I understand." -- Confucius

23rd February 2009, 06:18	#6
kichik M.I.A. [NSIS Dev, Mod] Join Date: Oct 2001 Location: Israel Posts: 11,337	If it's not mentioned, it's zlib like NSIS itself. But the license has nothing to do with this issue. NSIS FAQ \| NSIS Home Page \| Donate $ "I hear and I forget. I see and I remember. I do and I understand." -- Confucius

24th February 2009, 03:22	#10
Anders Moderator Join Date: Jun 2002 Location: ${NSISDIR} Posts: 2,776	I know I talked about this with kichik on IRC a while back, can't find it in my logs ATM. But yes, anything on the wiki that does not have its own license is zlib. Why http://nsis.sourceforge.net/License does not include parts about the wiki, I don't know, maybe "plug-ins , documentation, examples" covers it (IANAL,TINLA) IntOp $PostCount $PostCount + 1

24th February 2009, 06:34	#12
Anders Moderator Join Date: Jun 2002 Location: ${NSISDIR} Posts: 2,776	no, zlib is not the same as GPL. It is _compatible_ with the GPL, but it also does not have the same restrictions that GPL has (IANAL) IntOp $PostCount $PostCount + 1

21st February 2009, 04:08	#2
Animaether Major Dude Join Date: Jun 2001 Posts: 1,173	perhaps execDos? Best bet, though, is to e-mail Trend Micro and tell them were to pick up a sample installer source, executable and the nsExec DLL source. They should then be able to add it to a whitelist. That said, if it's one of those newfangled 'zomg those cookies are MALWARE!!!!!!' products, then they may very well have a hard stance that -any- suppressing of windows will be flagged. Should contact them, either way, though

21st February 2009, 05:49	#3
gan.gary Junior Member Join Date: Feb 2009 Posts: 7	thanks, it could be the options. Asking user to add it to whitelist of AV could be impossible. Just afraid this plugin might cause another similar issue next time, since it's an commercial application. Is it a freeware? I found no EULA there.

23rd February 2009, 01:01	#5
gan.gary Junior Member Join Date: Feb 2009 Posts: 7	Thanks, what about license issue? Nothing mentioned in Wiki page: http://nsis.sourceforge.net/ExecDos

23rd February 2009, 07:58	#7
gan.gary Junior Member Join Date: Feb 2009 Posts: 7	sorry, I confused you. I was trying to say I am gonna use it in commercial app. It'd be a grey area if it's not specified. It could not be found here: http://nsis.sourceforge.net/User:Takhir I think I gotta contact him directly: http://forums.winamp.com/memberlist.php?s=&action=getall&what=username&ltr=T&perpage=100&orderby=username&ausername=&homepage=&icq=&aim=&yahoo=&joindateafter=&joindatebefore=&lastpostafter=&lastpostbefore=&postslower=&postsupper=&direction=ASC&pagenumber=5

23rd February 2009, 13:47	#8
Takhir Major Dude Join Date: Feb 2004 Location: Moscow, Russia Posts: 1,220	'There are no new private messages since your last visit.' OK, ExecDos is free for any use like NSIS itself

24th February 2009, 02:47	#9
gan.gary Junior Member Join Date: Feb 2009 Posts: 7	Great, tq. I prefer any document in black in white, so that I can release it with my app's EULA. Or is it applicable to: (http://nsis.sourceforge.net/License) Applicable licenses All NSIS source code, plug-ins , documentation, examples, header files and graphics, with the exception of the compression modules and where otherwise noted, are licensed under the zlib/libpng license. The zlib compression module for NSIS is licensed under the zlib/libpng license. The bzip2 compression module for NSIS is licensed under the bzip2 license. The lzma compression module for NSIS is licensed under the Common Public License version 1.0. and since it's CPL v1, I subjected to this (http://www.ibm.com/developerworks/library/os-cplfaq.html) ? Can I take a Program licensed under the CPL, compile it without modification, and commercially license the result? Yes. You may compile a Program licensed under the CPL without modification and commercially license the result in accordance with the terms of the CPL. Do I need to include the source code for such Program with the object code distribution? No. But you do need to include a statement that the source code is available from you and information on how to obtain it. Actually I sent the mail to this add: 'ineum@narod.ru'

24th February 2009, 04:31	#11
gan.gary Junior Member Join Date: Feb 2009 Posts: 7	I think I overlooked. If it's released under zLib, then it'd be GPL (http://www.zlib.net/zlib_license.html, http://en.wikipedia.org/wiki/Zlib_License), instead of CPL. If it's GPL v2, does it mean zlib, NSIS, execDos cannot be used as proprietry software (http://www.gnu.org/licenses/old-licenses/gpl-2.0.html) ? This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License.

24th February 2009, 08:13	#13
gan.gary Junior Member Join Date: Feb 2009 Posts: 7	meant it's neither CPL nor GPL? then thanks. I just attach the zlib license.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode