#include <conio.h>
#include <stdlib.h>
main() {
printf("hello");
getchar();
}
When I compile the above code the created binary is detected by the AVG Antivirus that immediately delete it.
I got the Threat: Trojan Horse BackDoor.Generic16.BOCF
Why I am Getting It...?
I agree with paulm and NetVipeC as this looks like a false positive. A false positive is any normal or expected behavior that is identified as anomalous or malicious. The term false positive is used when antivirus software wrongly classifies an innocuous file as a virus.
You may check for details
The major problem that false positives create is that they can easily drown out legitimate IDS alerts. A single rule causing false positives can easily create thousands of alerts in a short period of time. If the assumption is made that an analyst can review one alert every five minutes, the analyst can review around 100 alerts per day. Reviewing one alert every five minutes is too fast for thorough analysis but we can assume that some alerts will not require thorough analysis lowering the average time for analysis. Looking at these numbers it is obvious that only a small number of false positives can drown out legitimate alerts. The alerts for rules that causing repeated false positives are often ignored or disabled.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With