NASM and ALINK

[Reozil]

Hi,
I´m using ALINK to generate my .exe files. I´m following this tutorial: http://forum.codecall.net/assembly-tutorials/40113-assembly-simple-window-win32-nasm.html

I have managed to run the code, but my avira thinks that the exe i convert from that code has some virus(TR/Crypt.XPACK.Gen Trojan). Why is this? Should i worry about this?

[Frank Kotler]

Far be it from me to urge anyone to ignore virus warnings, but it seems unlikely that you've got anything to worry about. Run it by other AV tools, if you're so inclined, and see what they say.

It's been a long time since I ran Windows, and mostly wrote dos code, even then. I have a vague recollection that Ollydbg would complain about "entrypoint outside of code section" (or some such) on code like that shown. To get rid of it, where RhetoricalRuvim does:

Code: [Select]

section .text use32

I used to do:

Code: [Select]

section .text use32 class=CODE

That shut Ollydbg up, as I recall, and Agner Fog's "objconv" is happier with the result, as well. I don't suppose that's what your AV is moaning about, but it might be worth a try.

Nice tutorial(s) and example! Thanks for the link!

Best,
Frank