Page 1 of 1

Subprocess EXE flagged by Avast

Posted: Thu Jul 05, 2018 6:45 pm
by thefunkyjoint
Hi,

Since the last Avast update, the subprocess EXE of my app is being flagged as "Win32:Malware-gen". The odd thing is my app itself is not being flagged, only the subprocess EXE, that has only the code below :

Code: Select all

program subprocess;

uses
  uCEFApplication,
  uCEFTypes,
  Sysutils,
  ShlObj,
  Windows,
  Forms;

{$R *.res}

begin
  chdir(extractfiledir(paramstr(0)));
  GlobalCEFApp := TCefApplication.Create;
  GlobalCEFApp.StartSubProcess;
  GlobalCEFApp.Free;
end.    
Does anybody has similar issue ? Any hints to avoid this false positive ?

I don't use Avast, but a lot of people use it, so it's been a headache since they started to flag it.

Thanks

Re: Subprocess EXE flagged by Avast

Posted: Fri Jul 06, 2018 9:20 am
by salvadordf
Many Delphi applications are incorrectly detected as malware. :oops:

We can only ask the antivirus developers to study this case again. It should help if we give them the link to the full source code and a clean EXE sample.

Please, send them your "subprocess.exe" using this form :
https://www.avast.com/false-positive-file-form.php

Re: Subprocess EXE flagged by Avast

Posted: Fri Jul 06, 2018 12:07 pm
by thefunkyjoint
Thank you Salvador, i already sent the file, but so for no return :(