MalvareBytes thinks that my Clickteam games are Malvare

Welcome to our brand new Clickteam Community Hub! We hope you will enjoy using the new features, which we will be further expanding in the coming months.

A few features including Passport are unavailable initially whilst we monitor stability of the new platform, we hope to bring these online very soon. Small issues will crop up following the import from our old system, including some message formatting, translation accuracy and other things.

Thank you for your patience whilst we've worked on this and we look forward to more exciting community developments soon!

Clickteam.

    Hello
    MalwareBytes has suddenly started to think that my games are malvare. Even empty projects.
    "Malware.AI.2626283202". It started doing that since yesterday. I have had MalvareBytes in use way before.
    I've tried reinstalling Clickteam and it didn't help.
    I don't know if this is related, but I used "Expression Evaluator Object" (ExpEval.mfx) and Xlua (xlua.mfx) yesterday for the first time in one small project.
    I checked the exe file with Avast and it says: Win32:PUP-gen [PUP]
    This problem does not occur in previous exe files that I have build before last night

    Edited 3 times, last by DuckJohnn (November 25, 2022 at 12:17 PM).

    Please use the "Unpacked EXE" option.
    This happens because the "single file" method of Fusion building apps means it has to carry lots of other files inside the exe, these files are then extracted to a temp folder as you launch it.
    Since these files extracted are mostly DLLs and gets quickly loaded up after extracting, antiviruses gets suspicious about this activity.

    Unpacked EXE option was made for this.
    Instead of extracting the files, it would be already there in the same folder as the exe, so it loads faster, you can sometimes update extensions without rebuilding it, and it won't trigger antiviruses like this.

    Please login to see this picture.

    Edited once, last by NaitorStudios (November 25, 2022 at 4:25 PM).

    It actually does!
    What happens is that over time antiviruses heuristics and databases change a lot, and since covid, people have been target more because of the period we had of home office and stuff.
    It does happen less in some builds, but only because people have reported it as false positive, and being more content available they can actually see that as common.
    New builds will have the least amount of content using the same exact runtime, so it has a different footprint, and anything new brings attention, specially when doing something considered suspicious.

    Hmmm.. there was only a day between the old and the new game build, and there was no problems with the previous one.
    My antivirus software didn't find "Win32:PUP-gen [PUP]" from that earlier build, but one was found in a newer build I made next day.
    I checked both builds at the same time.

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!

Register Yourself Login