-->

Virus in Delphi 7

2019-01-26 04:49发布

问题:

When i compile a new project in Delphi 7 IDE , the MCafee identifies it as Virus and deletes it .

The virus identified as Generic.dx!gmk and is deleted by the antivirus so no new Exe is created .

How do we resolve this issue ?

Is this a false positive ?

回答1:

Two possibilities:

  1. False positive. You could submit your app to VirusTotal to check it against other AV tools.
  2. You're infected with this virus which targets D7. This would cause Delphi to produce infected EXEs.


回答2:

Many honest developers have problems because of careless antivirus software. See this also: How to prevent false positive virus alarm on my software?

Imagine that for each false positive they show, you lose a possible customer. Maybe we can unite against such antivirus products and force them to be more careful about false positive alarms, even to get some revenue back for the sales we lose because of them.



回答3:

Follow these steps to fix the problem:

  • go to /source/rtl Delphi7. There is a 'makefile' file.
  • please make a new dir called 'Lib' on it
  • enter command-line (cmd.exe); enter the keyword MAKE and ENTER key
  • it'll be recompiled the dcu files on the Lib diretory created.
  • back-up delphi7's original Lib dir
  • copy override the dcu created
  • please test application (http://www.virustotal.com/)


回答4:

You may like to consider answers in How can I scan my apps against popular scanners as I think this is becoming more common. Delphi has been used for some viruses, and the scanners are not good at picking an accurate signature that is not also used in other Delphi apps.



回答5:

It might a false positive.

One of our new developers (who is also new to Delphi) was experiencing the same thing. He renamed his "test" project and forms from the default and it stopped being picked up.

I'm guessing somebody did write a virus/trojan in Delphi using the default project and form name and the "pattern" they created made it into the AV databases.



回答6:

Check the link : http://ginktage.com/?p=501

I have described the problem and possible solution too .

I still feel this is a false positive .



回答7:

Or just update - Delphi 2010 is 100 times better :-)



标签: delphi virus