CODEWITHSUNDEEP
delphiindyindy10viruskaspersky
alancc
alancc

Reputation: 799

Delphi exe using Indy will be taken as Virus?

I am using Delphi XE3 with its built-in Indy.

I find whenever I build a project which uses Indy IdHTTP component, then Kaspersky will take the built .EXE file as infected a virus called HEUR:Trojan.Win32.Agent.gen.

I think this is a false positive so I report this to Kaspersky, but several weeks passed, no one answers.

Has anyone else encounter such a problem?

Thanks

Upvotes: -1

Views: 1622

Answers (2)

Omen
Omen

Reputation: 88

I've encountered this recently and aside from the tips given by others, it might help if you choose a different target. 32-bit Delphi apps are prone to encountering false positives but 64-bit Delphi apps are less so.

Upvotes: 1

Darian Miller
Darian Miller

Reputation: 8088

Specific answer to your question - yes, this sometimes happens.

The best work around is to digitally sign your executables. Microsoft and AV companies typically look favorably at properly signed executables.

Otherwise, you can report this false-positive to Kaspersky and they may eventually correct it. But, it will occur randomly in the future from Kaspersky or any other anti-malware solution.

Some related links:

Note from the vault: You can also try changing the user-agent on your HTTP-post. This worked many years ago as a workaround.

Upvotes: 4

Related Questions