Tsar wrote: Sun Feb 15, 2026 5:03 am
First time... you need to know, I'm not a Coder.
I'm just shared that indicator.
I'd like to know (and other Traders too, I suppose)
May I ask you to explaint in Detail :
What Reason and the Support make you say external Libraries are un-necessary and risky ? And it related to Windows OS ?
Can you provide the Evidence ?
First, no offense intended to you personally. I understand you are just sharing the indicator and not the developer. My comment was about the technical risk model of DLL-based indicators in general, not about this specific tool or you.
When an MT4 indicator loads an external DLL, it is no longer just an indicator.
It becomes native Windows software with the same privileges as your user account.
When an indicator imports DLLs like kernel32.dll, user32.dll, ws2_32.dll, advapi32.dll, or ntdll.dll, it is calling native Windows API functions directly, bypassing MetaTrader’s internal security restrictions.
This means:
kernel32.dll and ntdll.dll allow low-level OS operations (memory, processes, file access).
user32.dll can interact with keyboard, mouse, and windows.
ws2_32.dll allows raw network communication (sending data to external servers).
advapi32.dll can access Windows registry and security APIs.
These libraries are not needed for a simple oscillator indicator, which can be coded fully in MQL4 without any external dependencies. That is why I said it is unnecessary for such a simple tool.
DLLs are often used for licensing, GUIs, neural networks, or high-performance calculations. But they increase the attack surface and reduce transparency, especially when the source code is not provided.
Evidence is not about this specific indicator being malicious it's about the documented capabilities of Windows APIs. Microsoft’s official documentation clearly shows what these DLLs can do. MT4 simply exposes those functions when “Allow DLL imports” is enabled.
So my point is not that this indicator is malware. My point is:
From a security and risk-management perspective, I personally prefer not to run system-level DLL code for a simple indicator when it can be done in pure MQL4.
Everyone has different risk tolerance. I prefer minimal dependencies.
Lastly, I’m sorry if this sounded personal my intention is purely technical and about security, not about anyone here.
