[fpc-pascal] Compiled program is a virus (seems to be internallinker problem)

Gerhard Scholz gs at g--s.de
Tue Feb 12 00:19:40 CET 2013


I switched to AVAST free Antivirus now, the problem does not occur here.

This is not a pascal question, but maybe can give me a hint if AVAST is good
or which software is more recommendable.
(I do not really trust the tests I find in the internet because I do not 
know
who pays them)

Gerhard

----- Original Message ----- 
From: "Gerhard Scholz" <gs at g--s.de>
To: "FPC-Pascal users discussions" <fpc-pascal at lists.freepascal.org>
Sent: Monday, February 11, 2013 11:07 PM
Subject: Re: [fpc-pascal] Compiled program is a virus (seems to be
internallinker problem)


> @Martin:
>
> Compile line: ppc386 -vv -al -CioOrt -Cs6000000 -Mobjfpc -O1 -OpPENTIUM
> (dropping the -gclt) helped.
>
> It seems you were right.
>
> Gerhard
>
> ----- Original Message ----- 
> From: "Martin" <lazarus at mfriebe.de>
> To: "FPC-Pascal users discussions" <fpc-pascal at lists.freepascal.org>
> Sent: Monday, February 11, 2013 10:08 PM
> Subject: Re: [fpc-pascal] Compiled program is a virus (seems to be
> internallinker problem)
>
>
>> On 11/02/2013 20:22, Gerhard Scholz wrote:
>>> Platform: Win32, FPC2.7.1, Virusscanner Avira Free Antivirus
>>>
>>> The compiled program is assumed to be a virus.
>>>
>>> Name:TR/Crypt.XPACK.Gen2 (according to Avira, shall be a trojan)
>>>
>>> Compile line:
>>> ppc386 -vv -al -CioOrt -Cs6000000        -gclt -Mobjfpc -O1 -OpPENTIUM
>>>
>>> With the external linker ( -Xe ) the program is not a virus and works.
>>>
>>> Shall I make a bug report from that? I think I can not produce a small
>>> test program, the problem occurs only with one program, others do
>>> compile without problem.
>>
>> IMHO, should be reported to the AV manufacturer.
>>
>> btw, if you strip debug info, is it still reported? Because Kaspersky
>> had/has that problem. And several other AV seems to get signatures from
>> the same source.
>>
>>
>> On report they updated their signatures. Apparently whitelisted. The
>> reported exe, now is fine. A byte by byte identical exe, with the
>> exception of one single digit, in a textual date string differing, is
>> still reported.
>> _______________________________________________
>> fpc-pascal maillist  -  fpc-pascal at lists.freepascal.org
>> http://lists.freepascal.org/mailman/listinfo/fpc-pascal
>




More information about the fpc-pascal mailing list