Hi,

My G-DATA anty-virus programm gives me an alert
when I tried to compile basic prg which includes some part of binary image and filesystem operation like _lcreat

Gen:Trojan.Heur.FU.emW@aiMYsyd (Engine-A)



http://77x.pl/prg_with_virus_allert.exe

Can You prove it?

___________

I checked it and the "file" directive does something what g-data recognize as an attack. Can U scan this attached file to check my research ?

Heuristic Scanning sucks more and more..
check this out.
http://vx.netlux.org/lib/static/vdat/epheurs1.htm

I found nothing but a GetCommandLine and MessageBox call.

I think these AVs with incredible bad heuristic (http://virusscan.jotti.org/de/scanresult/81d4789ee6f9a7b497c316043921fb3b1be29e0e) will disappear in next few years because they generate more and more false positives and harm the user more than viruses do. That has already happened.

thanks a lot


thx for Your suggestion.
I am going to write some rules for g-data to protect fasm against this antyvirus software.

I would suggest to not let these false positives without reaction. Send the false detected files to the AV makers. Usually there is a support form on their site, or e-mail or some other contact method.
If there is a support forum, you can make public complaint!
I had several cases of false positives from Avira and Symantec AV.
Fortunately, after I sent the files to the support desk, things was fixed and the false positives disappeared with the next AV update.

Yep, what Overflowz said

G-data, Avira Antivir often produce fake alerts, just ignore that shitty anti-viruses.