[fpc-pascal] Compiled program is a virus (seems to be internal linker problem)

Martin lazarus at mfriebe.de
Mon Feb 11 22:08:58 CET 2013

On 11/02/2013 20:22, Gerhard Scholz wrote:
> Platform: Win32, FPC2.7.1, Virusscanner Avira Free Antivirus
> The compiled program is assumed to be a virus.
> Name:TR/Crypt.XPACK.Gen2 (according to Avira, shall be a trojan)
> Compile line: ppc386 -vv -al -CioOrt -Cs6000000        -gclt -Mobjfpc 
> With the external linker ( -Xe ) the program is not a virus and works.
> Shall I make a bug report from that? I think I can not produce a small 
> test program, the problem occurs only with one program, others do 
> compile without problem.

IMHO, should be reported to the AV manufacturer.

btw, if you strip debug info, is it still reported? Because Kaspersky 
had/has that problem. And several other AV seems to get signatures from 
the same source.

On report they updated their signatures. Apparently whitelisted. The 
reported exe, now is fine. A byte by byte identical exe, with the 
exception of one single digit, in a textual date string differing, is 
still reported.

More information about the fpc-pascal mailing list