MalvareBytes thinks that my Clickteam games are Malvare

[DuckJohnn]

Hello
MalwareBytes has suddenly started to think that my games are malvare. Even empty projects.
"Malware.AI.2626283202". It started doing that since yesterday. I have had MalvareBytes in use way before.
I've tried reinstalling Clickteam and it didn't help.
I don't know if this is related, but I used "Expression Evaluator Object" (ExpEval.mfx) and Xlua (xlua.mfx) yesterday for the first time in one small project.
I checked the exe file with Avast and it says: Win32:PUP-gen [PUP]
This problem does not occur in previous exe files that I have build before last night

[NaitorStudios]

Please use the "Unpacked EXE" option.
This happens because the "single file" method of Fusion building apps means it has to carry lots of other files inside the exe, these files are then extracted to a temp folder as you launch it.
Since these files extracted are mostly DLLs and gets quickly loaded up after extracting, antiviruses gets suspicious about this activity.

Unpacked EXE option was made for this.
Instead of extracting the files, it would be already there in the same folder as the exe, so it loads faster, you can sometimes update extensions without rebuilding it, and it won't trigger antiviruses like this.

[DuckJohnn]

This seems to work.. Thanks! I wonder why doesn't it think older builds are malwares?

[NaitorStudios]

It actually does!
What happens is that over time antiviruses heuristics and databases change a lot, and since covid, people have been target more because of the period we had of home office and stuff.
It does happen less in some builds, but only because people have reported it as false positive, and being more content available they can actually see that as common.
New builds will have the least amount of content using the same exact runtime, so it has a different footprint, and anything new brings attention, specially when doing something considered suspicious.

[DuckJohnn]

Hmmm.. there was only a day between the old and the new game build, and there was no problems with the previous one.
My antivirus software didn't find "Win32:PUP-gen [PUP]" from that earlier build, but one was found in a newer build I made next day.
I checked both builds at the same time.

[NaitorStudios]

It may be luck, randomness or a change on the antivirus.
Unfortunately it's unpredictable...