Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

The W32-Induc A virus (or the Delphi compile-a-virus)

Reference Material

The W32-Induc A virus (or the Delphi compile-a-virus)

by  Glenn9999  Posted    (Edited  )
This is from 2009, but it still might be a concern and some might be unaware, so I thought it would be good to place the reference material here for this one, especially since it has not been previously referenced. The links illustrate the issue very clearly, but the gist of it is there is a virus which looks for one of the Delphi RTL source files (v4-7) and changes it to add the "virus code" to any executable that is compiled. This is not just an exe virus, but also something that would need to be patched in your Delphi if you happen to be generating these virus files.

http://edn.embarcadero.com/article/39851
http://www.theregister.co.uk/2009/08/19/delphi_malware/
http://nakedsecurity.sophos.com/2009/08/18/compileavirus/

Regardless, it's good to read-only / protect any of your code libraries that you use.
Register to add this FAQ to your archive
Register to rate this FAQ  : BAD 1 2 3 4 5 6 7 8 9 10 GOOD
Please Note: 1 is Bad, 10 is Good :-)

Part and Inventory Search

Back
Top