Avast is reporting virus found in rundll32.exe

Viruses and worms
1

Virus Found
Original folder : C:\USERS\BILL\Documents\PureBasic_Compilation0.exe
Infection : Win32:Evo-gen[Susp]
Process : C:\Windows\System32\rundll32.exe

The PureBasic_Compilation0.exe is from a programing language I use from time to time. When I compile some code Purebasic creates a temporary executable located at the codes directory.
The virus popped up when I wasn’t running the temporary executable. I checked the task manager and it wasn’t reporting that it was running.
So, I told avast to delete it, but avast just keeps reappearing every couple of seconds with the same warning.

Restarting the computer was the only way to make it stop. This is the second time in two weeks that it has happened.
I tried scanning with Malwarebytes, but it says everything is clean. The first time it happened I also did an adwcleaner scan, but that also came up clean.

Any ideas why this is happening? I have been using Purebasic for several years now and I’ve seen several false positives when compiling a program, but never anything like this. Which makes me believe it’s something else using the exe as a cover.

I attached the Malware log even though it says it’s clean.

2

https://blog.avast.com/tag/false-positive/

3

Thanks Eddy that was an interesting read.

The problem is that I wasn’t even running the compiled executable when the alert appeared which makes it hard for me to believe it’s a false positive. Plus the fact that the same virus alert would reappear as soon as avast deleted the original executable. I must have had avast delete it 20+ times in a minute or two before I gave up on it.

I even checked the executable location and it was deleted. So, why would avast keep reporting the virus after it deleted the executable?
All I can say is this seems to act a lot more like a virus then a false positive, but what do I know it could very well be some kind of non killable false positive thingamajig.

4

You don’t have to run/open a application.
If you browse a folder avast is scanning the files in it which can give a alert.

As a side note:
I have done a lot of programming in Basic in the old days.
PureBasic looks nice, too bad it is not free.
Currently I am looking into FreeBasic.