false positive? Win32/Sabsik.FT.A!ml

Question

after compiling my C++ using the devolper console "cl /EHsc hello.cpp" this triggered my antivirus to say Win32/Sabsik.FT.A!ml trojan was discovered and it affected "hello.cpp", so false positive or not or this Win32/Sabsik.FT.A!ml the C++ compilor?

Answer 1

I am getting the same thing. I compiled a program I wrote using the MSVC dev console and widows defender won't let me run it, thinking it detected sabsik trojan.

Answer 2

Hi, I'm Elise, and I'd be happy to help with your issue.

It sounds very much like this is a false positive, as it is detecting the file you that you created. If it were the complier then there would be further results relating to that as well.

Please let me know if you need any further assistance.

Kind Regards,

Elise

Answer 3

The solution is to update Windows to the latest version (we are running 21H1) then after restart search for updates again and you will get an update to Windows Defender that remedies this (which may or may not require a restart again).