Jump to content

False positive with certain programs compiled by old Borland compiler


ernie_cordell
 Share

Recommended Posts

I'm using Malwarebytes 1.70.0.1100 and I don't know whether this is a known issue or not, but on certain C programs that I wrote (which allocate memory dynamically) are flagged as Trojans when I compile them with the Borland bcc32 compiler. None of the programs which use static memory allocation are flagged when compiled with the old Borland compiler (now Embarcadero). Some of my programs have been flagged in the past when I have compiled (Windows PE format) with gcc (Gnu Compiler Collection). None of the compiler sets produce any warnings when scanned, so it seems to be something peculiar to the executables produced by compilation. I just compiled the same programs with dynamic memory allocation with the Microsoft ® C/C++ Optimizing Compiler Version 15.00.30729.01 for x64 (under Windows7) and they produce no warnings. I am aware that I can exclude this directory from scanning, but I am reporting this for your benefit that you might find the cause of the false positive.

Malwarebytes Anti-Malware 1.70.0.1100

www.malwarebytes.org

Database version: v2013.03.19.03

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16521

cordelle :: KAREEM [administrator]

3/27/2013 3:43:33 PM

MBAM-log-2013-03-27 (15-45-36).txt

Scan type: Custom scan (c:\borland|)

Scan options enabled: File System | Heuristics/Shuriken | PUP | PUM

Scan options disabled: Memory | Startup | Registry | Heuristics/Extra | P2P

Objects scanned: 1463

Time elapsed: 1 minute(s), 9 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 2

c:\Borland\listargs.exe (Trojan.Ransom.ANC) -> No action taken. [0bd4d2f055167bbb3ec09479827f12ee]

c:\Borland\qarglist.exe (Trojan.Ransom.ANC) -> No action taken. [a13e9a285c0f89ad926c5bb2f908d030]

(end)

MBAM-log-2013-03-27 (15-45-36).zip

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.