Hi I don't know is that helpful information. Symantec delete that files in my case - writerfilter\qa\cppunittests\rtftok\data\pass\ sf_508f4e169fb76c80745d3541bd01b0a2-73462-minimized.rtf Virus:Trojan.Mdropper - d:\bld\deb\workdir\UnpackedTarball\icu\source\bin\ genrb.exe Virus: Suspicious.Cloud - d:\bld\deb\workdir\UnpackedTarball\nss\nss\lib\zlib\out\ example.exe Virus: Suspicious.Cloud.5 The "rtf"-file have excluded from the scan. When I have this follow "autogen.sh setting" then the "exe" have the virus --with-external-tar=/cygdrive/d/src/lo/externalsrc --enable-pch --disable-ccache --disable-activex --disable-atl --enable-debug --with-ant-home=/cygdrive/d/src/lo/apache-ant-1.9.4 --with-junit=/cygdrive/d/src/lo/junit-4.10.jar --with-visual-studio=2012 BUT with this "autogen.sh setting" NO VIRUS for "exe" --with-external-tar=/cygdrive/d/src/lo/externalsrc --enable-pch --disable-ccache --disable-activex --disable-atl --enable-dbgutil --with-ant-home=/cygdrive/d/src/lo/apache-ant-1.9.4 --with-junit=/cygdrive/d/src/lo/junit-4.10.jar --with-visual-studio=2012 --with-lang=de en-GB In the Release Version have this "autogen.sh setting" and have the Virus for "exe" --with-external-tar=/cygdrive/d/src/lo/externalsrc --enable-pch --disable-ccache --disable-activex --disable-atl --with-ant-home=/cygdrive/d/src/lo/apache-ant-1.9.4 --with-junit=/cygdrive/d/src/lo/junit-4.10.jar I'm not really sure why, but it works in my case. Juergen