I was just notified by some users that AVG Antivirus is reporting BetterShopper for containing a "hidden extension .js", whatever that means.
So, here's the thing: there is no "hidden extension .js" (whatever that means) inside the extension, and I've just sent a mail to AVG by now requesting clarification and a fix for this false positive. If you don't want to take my word for it, take a look at the extension source code and look whether you can find anything malicious. ;)
So, please remain calm and don't trust AVG on this one. Thanks.
Carlo
BetterShopper dev
UPDATE 2005-05-23 07:00 GMT: It dawned me why AVG is acting up. You see, it's reporting one of the contained Javascript libraries as being a "hidden extension .js" file. The name of the library is "helper.URL.js". Now, in the Windows world, if you create a local URL link, i.e. a link to an URL and place it on your desktop or your local harddrive, it has the extension ".url". Now, also in the Windows world, when you look inside any directory, usually the file extensions are hidden, meaning if for instance there is a file "harmlessfile.txt", you'd only see "harmlessfile". So, many virii are masking themselves by using unsuspicious file names like "text.txt" to hide the fact that it is a malicious executable; so the virus file names would be something like "harmlessfile.txt.exe", and since the default Windows setting is "hide file extensions", many users would only see "harmlessfile.txt" and click it because it looks like a harmless text file.
Now I
guess AVG is complaining because to him/her/it it looks like said Javascript library is trying to "mask" itself behind an unsuspicious looking ".url" file, which isn't the case. In fact, I bet that's the whole problem -- the file name.
So in order to make AVG stop I'll release a new minor version of the extension later on today. Stay tuned.
UPDATE 2005-05-23 14:30 GMT: Just got a reply from Grisoft, the AVG developer:
Dear Carlo, [..]
I have contacted our Technical Support concerning this issue and be informed that this is a typical AVG Anti-Virus feature!
We are detecting all hidden/duplicated extensions as a possible threat.
Best regards,
Tomas V.
Sales Team
GRISOFT(Emphasis mine.) Yeah, great. Oh well, at least it shows I'm on the right track.