Getting "VHO:Trojan-Ransom.MSIL.Convagent.gen" each time while compiling "C" script.

[StormSplits]

Whenever I try compiling and running my "C" script in VS Code, I get "VHO:Trojan-Ransom.MSIL.Convagent.gen" for advanced disinfection. But when I'm running the code while keeping the Kaspersky disabled I'm not getting any warning or disinfection prompt, everything was working fine.

[Guilhermesene4096]

Hello @StormSplits

Welcome to the Kaspersky community.

I understand that Kaspersky is detecting the file you are compiling as malware (it's probably a false positive). To solve this problem try putting the file or its folder in exclusions, that way when you compile Kaspersky won't detect the file as malicious.

It is not recommended that you disable Kaspersky, as this will leave your device vulnerable.

To exclude files/folders from the scan do the following:

1. Open the Kaspersky interface
2. In the bottom left corner, select the gear symbol (configuration)
3. Click on "Security settings"
4. Scroll down and click → Exclusions and actions on object detection
5. Scroll down again and click → Manage exclusions 
6. Click on "Add"
7. Under "File or folder", select the file or folder to exclude from the scan 
8. Under protection components, select "All components" or a specific component you want as the Verification component.
9. Under "Status", select → Active
10. Click → Add
11. Click → Ok
12. Click → Save

Try the procedures above and if you can give feedback 👍

If possible, please send the file here → KasperskyThreat Intelligence Portal

Sincerely,

Guilherme

Edited January 16 by Guilhermesene4096

[daaccount]

Similar problem here.

OS: Windows 11 Pro 22H2

Kaspersky Internet Security

I'm using Microsoft Visual Studio Community 2022 (64-bit) Version 17.5.3

.NET Framework Version 4.8.09032

 

 

I have created Console App (C++) and the only code was

int main()
{
    std::cout << "Hello World!\n";
}

 

Debug configuration worked fine, but .exe file in the Release configuration was quarantined. VHO:Trojan.Win64.Convagent.get was detected.

Then I have performed Full and all other scans and no threats were detected.

 

Curiously after adding some CUDA code, both configurations produce legit .exe files.

 

 

"If possible, please send the file here → KasperskyThreat Intelligence Portal "

How can I extract a file from the quarantine in say zip or any other format without restoring it. I feel uneasy to have it again in the file system.

[Berny]

@daaccount Welcome.

⚠️ Only if you trust the object please try this :

• Disable : Performance → PC Speed-up → ⚙️Settings → Perform recommended actions automatically
• Kaspersky will ask you to decide which action to take on detected objects
• Choose  for “Quarantine”
• Restore the  quarantined object
• Create an exclusion rule for the object
• Enable : Performance → PC Speed-up → ⚙️Settings → Perform recommended actions automatically
• Reboot