I have a program that I wrote in Delphi. The program is available for download, but some antivirus like Norton detects it as malware, while other antivirus, like AVG, has no issues with it.

Moreover, Google Chrome also gives a malware warning when you want to download the program from my website.

Is there some way to prevent this, apart from putting the EXE file in a ZIP file?

  • Putting it into a zip file is not a solution. Rather find out what's causing this, and fix it. Or, if that turns out impossible, at least explain it to users up front. – user7043 Mar 17 '12 at 12:28
  • 2
    what version of Delphi and what type off app is it? There were issues like this with console apps compiled by a specific Delphi version. Searching Stack Overflow and/or google for Delphi and virus software should bring up relevant information. – Marjan Venema Mar 17 '12 at 13:13
  • 1
    norton is overzealous about what it thinks is a virus (some version classed itself as a virus) – ratchet freak Mar 17 '12 at 13:29
  • 1
    What AVG does or doesn't call a virus isn't really a meaningful data point. – Kyralessa Mar 17 '12 at 20:40
  • 1
    @ratchetfreak: [Insert snarky comment about "some version" being correct here] – Mason Wheeler May 30 '12 at 17:53

You should try to contact Norton's (Symantec's?) customer service. I believe this is standard practice among vendors of legit programs which are wrongly flagged as viruses.


Something to keep in mind: It might really be infected. There is a virus out there that infects Delphi itself. If you're infected with it any executable that Delphi produces will be infected.

  • 2
    The things is the installer was tested with other anti-virus and nothing was detected. It is Norton that is giving issues, and the problem is that a lot of people are using Norton – Japie Bosman Mar 18 '12 at 12:20

In case anyone is interested, this article treats a similar case with a program that's just a do-nothing WinMain function - The Case of Evil WinMain.

Story about how a third of all antivirus programs has gone crazy for no obvious reason...

#include <windows.h>

int WINAPI WinMain(HINSTANCE inst,HINSTANCE prev,LPSTR cmd,int show) {
    return 0;


So what caused additional antivirus software vendors to go NUTS?

I am starting to feel that they simply started to search for malware in libc itself. If so then that's kind of strange because there is not that many versions of libc linked to nearly everything under the sun over and over.

Here is the mentioned VS 2008 ProjectFile + source + resulting binary not doing anything along with vtotal results for it.

But please go ahead and create an EMPTY C++ project to see it yourself.
Add a cpp file with this empty winmain doing nothing build release ...

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.