Subprocess EXE flagged by Avast

[thefunkyjoint]

Hi,

Since the last Avast update, the subprocess EXE of my app is being flagged as "Win32:Malware-gen". The odd thing is my app itself is not being flagged, only the subprocess EXE, that has only the code below :

Code: Select all

program subprocess;

uses
  uCEFApplication,
  uCEFTypes,
  Sysutils,
  ShlObj,
  Windows,
  Forms;

{$R *.res}

begin
  chdir(extractfiledir(paramstr(0)));
  GlobalCEFApp := TCefApplication.Create;
  GlobalCEFApp.StartSubProcess;
  GlobalCEFApp.Free;
end.    

Does anybody has similar issue ? Any hints to avoid this false positive ?

I don't use Avast, but a lot of people use it, so it's been a headache since they started to flag it.

Thanks

[salvadordf]

Many Delphi applications are incorrectly detected as malware.

We can only ask the antivirus developers to study this case again. It should help if we give them the link to the full source code and a clean EXE sample.

Please, send them your "subprocess.exe" using this form :
https://www.avast.com/false-positive-file-form.php

[thefunkyjoint]

Thank you Salvador, i already sent the file, but so for no return