Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a program that I wrote in Delphi. The program is available for download, but some antivirus like Norton detects it as malware, while other antivirus, like AVG, has no issues with it.

Moreover, Google Chrome also gives a malware warning when you want to download the program from my website.

Is there some way to prevent this, apart from putting the EXE file in a ZIP file?

share|improve this question
Putting it into a zip file is not a solution. Rather find out what's causing this, and fix it. Or, if that turns out impossible, at least explain it to users up front. – delnan Mar 17 '12 at 12:28
what version of Delphi and what type off app is it? There were issues like this with console apps compiled by a specific Delphi version. Searching Stack Overflow and/or google for Delphi and virus software should bring up relevant information. – Marjan Venema Mar 17 '12 at 13:13
norton is overzealous about what it thinks is a virus (some version classed itself as a virus) – ratchet freak Mar 17 '12 at 13:29
What AVG does or doesn't call a virus isn't really a meaningful data point. – Kyralessa Mar 17 '12 at 20:40
@ratchetfreak: [Insert snarky comment about "some version" being correct here] – Mason Wheeler May 30 '12 at 17:53
up vote 18 down vote accepted

You should try to contact Norton's (Symantec's?) customer service. I believe this is standard practice among vendors of legit programs which are wrongly flagged as viruses.

share|improve this answer

Something to keep in mind: It might really be infected. There is a virus out there that infects Delphi itself. If you're infected with it any executable that Delphi produces will be infected.

share|improve this answer
The things is the installer was tested with other anti-virus and nothing was detected. It is Norton that is giving issues, and the problem is that a lot of people are using Norton – Japie Bosman Mar 18 '12 at 12:20

In case anyone is interested, this article treats a similar case with a program that's just a do-nothing WinMain function - The Case of Evil WinMain.

Story about how a third of all antivirus programs has gone crazy for no obvious reason...

#include <windows.h>

int WINAPI WinMain(HINSTANCE inst,HINSTANCE prev,LPSTR cmd,int show) {
    return 0;


So what caused additional antivirus software vendors to go NUTS?

I am starting to feel that they simply started to search for malware in libc itself. If so then that's kind of strange because there is not that many versions of libc linked to nearly everything under the sun over and over.

Here is the mentioned VS 2008 ProjectFile + source + resulting binary not doing anything along with vtotal results for it.

But please go ahead and create an EMPTY C++ project to see it yourself.
Add a cpp file with this empty winmain doing nothing build release ...

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.