[fpc-pascal] Compiled program is a virus (seems to be internallinker problem)

[Gerhard Scholz]

@Martin:

Compile line: ppc386 -vv -al -CioOrt -Cs6000000 -Mobjfpc -O1 -OpPENTIUM
(dropping the -gclt) helped.

It seems you were right.

Gerhard

----- Original Message ----- 
From: "Martin" <lazarus at mfriebe.de>
To: "FPC-Pascal users discussions" <fpc-pascal at lists.freepascal.org>
Sent: Monday, February 11, 2013 10:08 PM
Subject: Re: [fpc-pascal] Compiled program is a virus (seems to be 
internallinker problem)


> On 11/02/2013 20:22, Gerhard Scholz wrote:
>> Platform: Win32, FPC2.7.1, Virusscanner Avira Free Antivirus
>>
>> The compiled program is assumed to be a virus.
>>
>> Name:TR/Crypt.XPACK.Gen2 (according to Avira, shall be a trojan)
>>
>> Compile line: 
>> ppc386 -vv -al -CioOrt -Cs6000000        -gclt -Mobjfpc -O1 -OpPENTIUM
>>
>> With the external linker ( -Xe ) the program is not a virus and works.
>>
>> Shall I make a bug report from that? I think I can not produce a small 
>> test program, the problem occurs only with one program, others do compile 
>> without problem.
>
> IMHO, should be reported to the AV manufacturer.
>
> btw, if you strip debug info, is it still reported? Because Kaspersky 
> had/has that problem. And several other AV seems to get signatures from 
> the same source.
>
>
> On report they updated their signatures. Apparently whitelisted. The 
> reported exe, now is fine. A byte by byte identical exe, with the 
> exception of one single digit, in a textual date string differing, is 
> still reported.
> _______________________________________________
> fpc-pascal maillist  -  fpc-pascal at lists.freepascal.org
> http://lists.freepascal.org/mailman/listinfo/fpc-pascal