Virus in Delphi 7

Question

When i compile a new project in Delphi 7 IDE , the MCafee identifies it as Virus and deletes it .

The virus identified as Generic.dx!gmk and is deleted by the antivirus so no new Exe is created .

How do we resolve this issue ?

Is this a false positive ?

Answer 1

Or just update - Delphi 2010 is 100 times better :-)

Answer 2

Follow these steps to fix the problem:

• go to /source/rtl Delphi7. There is a 'makefile' file.
• please make a new dir called 'Lib' on it
• enter command-line (cmd.exe); enter the keyword MAKE and ENTER key
• it'll be recompiled the dcu files on the Lib diretory created.
• back-up delphi7's original Lib dir
• copy override the dcu created
• please test application (http://www.virustotal.com/)

Answer 3

You may like to consider answers in How can I scan my apps against popular scanners as I think this is becoming more common. Delphi has been used for some viruses, and the scanners are not good at picking an accurate signature that is not also used in other Delphi apps.

Answer 4

It might a false positive.

One of our new developers (who is also new to Delphi) was experiencing the same thing. He renamed his "test" project and forms from the default and it stopped being picked up.

I'm guessing somebody did write a virus/trojan in Delphi using the default project and form name and the "pattern" they created made it into the AV databases.

Answer 5

Many honest developers have problems because of careless antivirus software. See this also: How to prevent false positive virus alarm on my software?

Imagine that for each false positive they show, you lose a possible customer. Maybe we can unite against such antivirus products and force them to be more careful about false positive alarms, even to get some revenue back for the sales we lose because of them.

Answer 6

Check the link : http://ginktage.com/?p=501

I have described the problem and possible solution too .

I still feel this is a false positive .