Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

C program Accidental Making Virus..?Why

Tags:

c

#include <conio.h>
#include <stdlib.h>

main() {
    printf("hello");
    getchar();
}

When I compile the above code the created binary is detected by the AVG Antivirus that immediately delete it.

I got the Threat: Trojan Horse BackDoor.Generic16.BOCF

Why I am Getting It...?

like image 764
Sachin Jain Avatar asked Mar 26 '26 20:03

Sachin Jain


1 Answers

I agree with paulm and NetVipeC as this looks like a false positive. A false positive is any normal or expected behavior that is identified as anomalous or malicious. The term false positive is used when antivirus software wrongly classifies an innocuous file as a virus.

You may check for details

The major problem that false positives create is that they can easily drown out legitimate IDS alerts. A single rule causing false positives can easily create thousands of alerts in a short period of time. If the assumption is made that an analyst can review one alert every five minutes, the analyst can review around 100 alerts per day. Reviewing one alert every five minutes is too fast for thorough analysis but we can assume that some alerts will not require thorough analysis lowering the average time for analysis. Looking at these numbers it is obvious that only a small number of false positives can drown out legitimate alerts. The alerts for rules that causing repeated false positives are often ignored or disabled.

like image 182
Rahul Tripathi Avatar answered Mar 28 '26 19:03

Rahul Tripathi



Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!