Virus warning Lazarus download....

[piXelicidio]

I Just downloading Lazarus to install it for first time 
... and Nod32 show me this alert:

F:\_px\zInstall\programming\Copy of lazarus-0.9.28.2-fpc-2.2.4-win32.exe » INNO » file3437.bin - probably a variant of Win32/Agent.BWVFAGP trojan


 

I use the official link of course:
http://sourceforge.net/project/showfiles.php?group_id=89339

[Vincent Snijders]

Did you complain with the antivirus software provider?

[xenblaise]

Reading it makes me laugh.  Impossible.  Dont believed that.

[ivan17]

ignore that. today's stupid antivirus programs bitch about anything - you compress your exe (that's why i don't use aspack) and users get trojan warnings in red letters; most anti-cracking solutions result in trojan warnings; also some non-everyday capabilities...

besides, there is no file3437.bin in the installer (you can use innounp.exe to unpack it manually). i don't have nod but i'm guessing it's the debugger that got the nod falsely excited.

[BlueIcaro]

My antivirus, Avast, doesn't find any virus in lazarus package.

/BlueIcaro

[benohb]

Virus....؟    Try programming with Linux  

[davesimplewear]

  I remeber those things .... viruses ... hmmm a long time ago since I gave up  windoze

[Zaher]

I remeber those things .... viruses ... hmmm a long time ago since I gave up  windoze

That because Linux need a Virus to same the distribution or Open Source virus compiled after infected

[piXelicidio]

Thanks! 

It just say "probably", maybe is wrong, it happen sometimes!

I just want to be sure.

 

[Martin_fr]

Well you are right to ask, if you do not know the project....

you can do additional checks:
http://www.virustotal.com/
or google for online scans

But as others pointed out, there are regular false positives.

gdb (the debugger) can cause them, as like every debugger, it needs to intercept the debugged process. Intercepting another process is more or less what a virus does too. except the debugger does it with your permission and knowledge...

upx (an executable packer). it packs your executable code. So it has routines that can modify the code. Some viruses do that. viruses do it for encryption, so the code can not be seen/scanned that easily.