[fpc-pascal] Compiled program is a virus (seems to be internal linker problem)

[Martin]

On 11/02/2013 20:22, Gerhard Scholz wrote:
> Platform: Win32, FPC2.7.1, Virusscanner Avira Free Antivirus
>
> The compiled program is assumed to be a virus.
>
> Name:TR/Crypt.XPACK.Gen2 (according to Avira, shall be a trojan)
>
> Compile line: ppc386 -vv -al -CioOrt -Cs6000000        -gclt -Mobjfpc 
> -O1 -OpPENTIUM
>
> With the external linker ( -Xe ) the program is not a virus and works.
>
> Shall I make a bug report from that? I think I can not produce a small 
> test program, the problem occurs only with one program, others do 
> compile without problem.

IMHO, should be reported to the AV manufacturer.

btw, if you strip debug info, is it still reported? Because Kaspersky 
had/has that problem. And several other AV seems to get signatures from 
the same source.


On report they updated their signatures. Apparently whitelisted. The 
reported exe, now is fine. A byte by byte identical exe, with the 
exception of one single digit, in a textual date string differing, is 
still reported.