<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body>
<p>Not only Windows Defender:</p>
<p>After a compiler run sometimes BitDefender moans (seldom) that
the binary is some malware.</p>
<p>Adding (or deleting) some code, another compiler run and the
phantom is gone.</p>
<p>The Anti-Virus programs use a heuristic because of the immense
ammount of malware and virus.</p>
<p>It is no pattern matching anymore like in the "old days".</p>
<p>So the number of false positive alarm increases.</p>
<p>Example: After using 7 years the YajHFC (Yet another Java HylaFAX
client) on our Windows clients</p>
<p>Bitdefender suddenly moant that it is malware: False positive.</p>
<p>Winni<br>
</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">Am 12.02.21 um 09:33 schrieb Alexander
Grotewohl via fpc-pascal:<br>
</div>
<blockquote type="cite"
cite="mid:MN2PR03MB5296A135B8800830CA58DF1DC58B9@MN2PR03MB5296.namprd03.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div dir="auto" style="direction: ltr; margin: 0; padding: 0;
font-family: sans-serif; font-size: 11pt; color: black; ">
Unfortunately from what I've read just using certain Windows
APIs is enough to get an executable flagged. Probably n<span
id="ms-outlook-android-cursor"></span>othing to be too
concerned about.<br>
<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0;
font-family: sans-serif; font-size: 11pt; color: black; ">
<span id="OutlookSignature">
<div dir="auto" style="direction: ltr; margin: 0; padding: 0;
font-family: sans-serif; font-size: 11pt; color: black; ">
--<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0;
font-family: sans-serif; font-size: 11pt; color: black; ">
Alexander Grotewohl<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0;
font-family: sans-serif; font-size: 11pt; color: black; ">
<a href="https://dcclost.com" moz-do-not-send="true">https://dcclost.com</a></div>
</span><br>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt"
face="Calibri, sans-serif" color="#000000"><b>From:</b>
fpc-pascal <a class="moz-txt-link-rfc2396E" href="mailto:fpc-pascal-bounces@lists.freepascal.org"><fpc-pascal-bounces@lists.freepascal.org></a> on
behalf of Alexander Bunakov via fpc-pascal
<a class="moz-txt-link-rfc2396E" href="mailto:fpc-pascal@lists.freepascal.org"><fpc-pascal@lists.freepascal.org></a><br>
<b>Sent:</b> Thursday, February 11, 2021 3:22:40 AM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:fpc-pascal@lists.freepascal.org">fpc-pascal@lists.freepascal.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:fpc-pascal@lists.freepascal.org"><fpc-pascal@lists.freepascal.org></a><br>
<b>Cc:</b> Alexander Bunakov <a class="moz-txt-link-rfc2396E" href="mailto:alexander@bunakov.su"><alexander@bunakov.su></a><br>
<b>Subject:</b> [fpc-pascal] Windows Defender considers fp.exe
a malicious program</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span
style="font-size:11pt;">
<div class="PlainText">Hello all,<br>
<br>
As of trunk r48648, Windows Defender deletes fp.exe after
compilation <br>
because it considers it an infected file. It claims that
fp.exe is <br>
infected with Trojan:Win32/Fuerboos.E!cl and quarantines
the file.<br>
<br>
Anyone else is experiencing this? Any idea why is this
happening?<br>
<br>
-- <br>
Regards,<br>
Alexander<br>
_______________________________________________<br>
fpc-pascal maillist - <a class="moz-txt-link-abbreviated" href="mailto:fpc-pascal@lists.freepascal.org">fpc-pascal@lists.freepascal.org</a><br>
<a
href="https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal"
moz-do-not-send="true">https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal</a><br>
</div>
</span></font></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
fpc-pascal maillist - <a class="moz-txt-link-abbreviated" href="mailto:fpc-pascal@lists.freepascal.org">fpc-pascal@lists.freepascal.org</a>
<a class="moz-txt-link-freetext" href="https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal">https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal</a>
</pre>
</blockquote>
</body>
</html>