[fpc-pascal] Windows Defender considers fp.exe a malicious program

[Winfried Bartnick]

Not only Windows Defender:

After a compiler  run sometimes BitDefender moans (seldom) that the 
binary is some malware.

Adding (or deleting) some code, another compiler run  and the phantom is 
gone.

The Anti-Virus programs use a heuristic because of the immense ammount 
of malware and virus.

It is no pattern matching anymore like in the "old days".

So the number of false positive alarm increases.

Example: After using 7 years the YajHFC (Yet another Java HylaFAX 
client) on our Windows clients

Bitdefender suddenly moant that it is malware: False positive.

Winni



Am 12.02.21 um 09:33 schrieb Alexander Grotewohl via fpc-pascal:
> Unfortunately from what I've read just using certain Windows APIs is 
> enough to get an executable flagged. Probably nothing to be too 
> concerned about.
>
> --
> Alexander Grotewohl
> https://dcclost.com <https://dcclost.com>
>
> ------------------------------------------------------------------------
> *From:* fpc-pascal <fpc-pascal-bounces at lists.freepascal.org> on behalf 
> of Alexander Bunakov via fpc-pascal <fpc-pascal at lists.freepascal.org>
> *Sent:* Thursday, February 11, 2021 3:22:40 AM
> *To:* fpc-pascal at lists.freepascal.org <fpc-pascal at lists.freepascal.org>
> *Cc:* Alexander Bunakov <alexander at bunakov.su>
> *Subject:* [fpc-pascal] Windows Defender considers fp.exe a malicious 
> program
> Hello all,
>
> As of trunk r48648, Windows Defender deletes fp.exe after compilation
> because it considers it an infected file. It claims that fp.exe is
> infected with Trojan:Win32/Fuerboos.E!cl and quarantines the file.
>
> Anyone else is experiencing this? Any idea why is this happening?
>
> -- 
> Regards,
> Alexander
> _______________________________________________
> fpc-pascal maillist  -  fpc-pascal at lists.freepascal.org
> https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal 
> <https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal>
>
> _______________________________________________
> fpc-pascal maillist  -  fpc-pascal at lists.freepascal.org
> https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freepascal.org/pipermail/fpc-pascal/attachments/20210212/860745d3/attachment.htm>