Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
False Positive Trojan warning major problems
#2
(10-02-2023, 07:02 PM)BartKindt Wrote: So, somewhere in my 250,000 lines of source code is something which generates a sequence of bytes in the Executable which triggens some anti-virus programs.

More likely, it is simply your use of the Delphi RTL in general. There are plenty of malicious virus/malware in the wild that are written in Delphi, and so it is not uncommon for ordinary Delphi programs to sometimes get flagged as false positives because they share common RTL code.

(10-02-2023, 07:02 PM)BartKindt Wrote: - How can I locate the exact position of this sequence in the executable?

You can't, because you don't know what definitions are being used to trigger the alert in the first place. All you can do is submit your app to the anti-virus/malware companies for review and hope they stop flagging it.

(10-02-2023, 07:02 PM)BartKindt Wrote: - How can I somehow reverse engineer (de-compille) the executable to the point that I can then locate where in the Source code the problem is?

There are plenty of decompiler tools available (IDA, etc), but you can't recover source code from decompiling, and that won't help you in this situation anyway.

Your best bet is to get yourself a code signing certificate. There are cheap options available.

Reply


Messages In This Thread
RE: False Positive Trojan warning major problems - by rlebeau - 10-03-2023, 05:13 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)