win32: trojan-gen, on my own program??

Alex74 · 9 Oct 2009 at 22:48

Seems Avast has decided that a program i wrote is infected with a trojan. :rolleyes:

I've let it delete the .exe, but as soon as i started to compile it again, it throws up the resident protection telling me that the .exe is infected :confused:

I'm running a boot-time scan to be sure, but.. surely it must a wierd repeat false positive?

Any thoughts?..

(oh and no I didnt write a trojan

)

namnoc · 9 Oct 2009 at 23:50

I've had the same with other AV software when I was writing code to edit .swf files. I am not familiar with your AV SW, but can you not just tell it to ignore certain directories?

Pho · 10 Oct 2009 at 00:19

What's the code your compiling? It must have something similar to viruses in it.

You aren't packing it with UPX or something are you?

Alex74 · 10 Oct 2009 at 00:35

As it stands it's some very simple Win32 code, compiled on Visual C++. Completely bog standard window creation. It's just a tad confusing that it would flag that specifically when other execs (which build upon exactly the same code) are ignored.

The boot-time scan came up with nothing. Now that i'm back in windows it's happy to compile and run without being flagged.

Just have to call this one a wierd false positive and move on I think.

Many thanks for the responses

theheyes · 10 Oct 2009 at 11:42

I've heard of some viruses infecting the compiler which injects it's code into the finished program. Sounds like a false positive though, which can happen.