Mirror of forum.nim-lang.org

9744 :: Windows Defender detected Trojan.AndroidOS/Multiverze in Nim-1.6.10_64.zip

• evad (orginal) [2022-12-21T13:35:09+01:00] view original

  It was marked as 'Severe' and put in quarantaine. Nim webmaster, can you please check and upload a clean one?

---

• didlybom (orginal) [2022-12-21T14:52:36+01:00] view original

  This is a false positive. There is no virus in the nim executable or installer (and definitely not a Android one!). This is Windows Defender being dumb.

---

• DeletedUser (orginal) [2022-12-21T19:46:49+01:00] view original

  https://forum.nim-lang.org/t/9388

  https://github.com/nim-lang/Nim/issues/17820

  Again, the gist of it is, people have used Nim to make malware, so some antiviruses automatically detect Nim programs (including Nim itself) and flag them as malware. We should really have a blog post about this for awareness so that maybe vendors will do something to fix it.

---

• sls1005 (orginal) [2022-12-23T04:28:53+01:00] view original

  I'll suggest to compute the checksum, though. The infection chance being very few doesn't means that it's impossible to be infected, just less possible than a false positive. However if every positive result is viewed as false positive, we'll really be infected.

---

• evad (orginal) [2022-12-23T07:48:00+01:00] view original

  I downloaded and installed nim-1.9.1-windows_x64.zip and Windows Defender had no problems with that.

---

• ringabout (orginal) [2022-12-23T08:54:39+01:00] view original

  fwiw, https://github.com/nim-lang/Nim/pull/19767 probably is the cause that 1.6.x has been flagged. We also have been trying to mitigate this issue => https://github.com/nim-lang/virus_checker

---

• jasonfi (orginal) [2022-12-23T10:10:10+01:00] view original

  Will this be fixed in a future v.1.6.x release, or perhaps v2?

---

• ringabout (orginal) [2022-12-23T12:30:39+01:00] view original

  The patch has been a part of v2.

---