|
From: | grischka |
Subject: | Re: [Tinycc-devel] AntiVirus messages |
Date: | Wed, 03 Dec 2008 18:56:09 +0100 |
User-agent: | Thunderbird 1.5.0.10 (Windows/20070221) |
Rüdiger Plantiko wrote:
Dear tcc authors and users, the binaries generated by tcc are classified as Worm (Zhelatin) or even Trojan by my AV programs Kaspersky resp. Norton AV. This is very likely a wrong classification but makes it hard to work with tcc for me. Just to go sure: Is there an "official" MD5 checksum for the current tcc.exe, tiny_impdef and tiny_libmaker?
$ md5sum released/tcc-0.9.24-win32-bin.zip bfea695874e79e5c3cf7f66ead3760e2 *released/tcc-0.9.24-win32-bin.zip
In one mail it is mentioned that there are some PE fields not filled by tcc which should be filled. Maybe one could tie tcc.exe to a little filter which does this work?
Maybe the worm was compiled with TinyCC? Well they say it is UPX compressed but I could not find a download link.
Regards, Rüdiger
[Prev in Thread] | Current Thread | [Next in Thread] |