Windows Defender false positives from fltk-1.4 with mingw32/gcc-9.2 on WIn11

11 views
Skip to first unread message

imacarthur

unread,
Mar 17, 2025, 5:40:26 AMMar 17
to fltk.coredev
So I was rebuilding my checkouts, and on my Win11 test box, when I compile with mingw-32 using their gcc-9.2, and static link in the '-static-libgcc -static-libstdc++' then Windows Defender panics and deletes about half of the exe's in the test and examples folders.

If I use another compiler (mingw32 / gcc-6.3 or mingw64, say) this does not happen, and if I don't link in '-static-libgcc -static-libstdc++'  then again, no trigger.

Looks like some combination of things with the static link is triggering whatever signature match Defender is looking for.

Hmm, OK, just tried 1.5, and it also seems to trigger if I static link '-static-libgcc -static-libstdc++' 

Just FYI.

Is anyone else seeing this? I assume I'm not the only person with mingw32/gcc-9 running!

Albrecht Schlosser

unread,
Mar 17, 2025, 2:15:04 PMMar 17
to fltkc...@googlegroups.com
On 3/17/25 10:40 imacarthur wrote:
So I was rebuilding my checkouts, and on my Win11 test box, when I compile with mingw-32 using their gcc-9.2, and static link in the '-static-libgcc -static-libstdc++' then Windows Defender panics and deletes about half of the exe's in the test and examples folders.

...

Is anyone else seeing this? I assume I'm not the only person with mingw32/gcc-9 running!

I don't see this in my Windows 10 VM with
$ gcc --version
gcc.exe (MinGW.org GCC Build-2) 9.2.0

imacarthur

unread,
Mar 18, 2025, 4:59:27 AMMar 18
to fltk.coredev
On Monday, 17 March 2025 at 18:15:04 UTC Albrecht-S wrote:
On 3/17/25 10:40 imacarthur wrote:
So I was rebuilding my checkouts, and on my Win11 test box, when I compile with mingw-32 using their gcc-9.2, and static link in the '-static-libgcc -static-libstdc++' then Windows Defender panics and deletes about half of the exe's in the test and examples folders.
Is anyone else seeing this? I assume I'm not the only person with mingw32/gcc-9 running!

I don't see this in my Windows 10 VM with
$ gcc --version gcc.exe (MinGW.org GCC Build-2) 9.2.0

Hmm, interesting. Thanks Albrecht.
I might need to get a second virus-scanner's opinion on that box then, Just In Case...

 
Reply all
Reply to author
Forward
0 new messages