Reply 3720 of 3952, by daniel_u
Dege, you may also consider how to make dgVoodoo2 not to advertise itself as virus threat. I think the way that you coded dgvoodoo2 make it susceptible of virus threat from heuristic scanners point of view, similar to most EXE packers and self-modifying codes. Today's signature-less scanners are mostly behavioral checkers, if the code behaves like a virus, then it will be quarantined until its true nature can be analyzed. The antivirus industry always has the mindset of "it's better be sorry than to let-go a zero-day outbreak".
I remember you had talked about this before and you did something special to prevent the reliance on flavors of MSVCRT, and that is causing the false positives from virus scanners. Personally, I think not having dgVoodoo2 advertised as virus threat is more critical than MSVCRT dependencies.
He might be using a packer for the exe and dll's.