False positive from avast

Discussion
1

See the image bellow, avast delete cursor.exe and say is a virus

image
image600×603 26.6 KB

6 Likes
2

i upvote for this i just uninstalled avast cause it wont let me use cursor

4

Hey, can you add Cursor to the exceptions list?

5

Screenshot 2025-02-22 205914
Screenshot 2025-02-22 205914602×607 35.3 KB

The same thing happened to me. I can’t add the file to exceptions either. Can anyone understand?

6

ive tried but when i did it said is unrecoverable so ive deleted avast

8

maybe because cursor have files access and delete actions are happening through it maybe that causes some triggers to avast and now they added it to blacklist

9

just posted elsewhere. Norton seems to be flagging this also:

image
image685×207 19.9 KB

image
image1155×740 54.5 KB

1 Like
10

Same with AVG… This is very anoying… I have even reinstalled from scratch.

1 Like
11

happened to me too.

Installed Cursor from cursor.com and the filename was CursorUserSetup-x64-0.45.15.exe.

It opened fine and after about 15 minutes I was in the middle of conversing with the agent and suddenly it quit. And I got a notification from Malwarebytes that the exe and the shortcut was infected with Malware.Ransom.Agent.Generic.

I’ve never had this before and I’ve been using Cursor for months.

Am I cooked?

12

Hi, I had the same problem and I created an exception thinking it was a false positive. The thing is that there are more people affected and seems like is related with the last version.

It would be great if we get any official communication about this as this never happened in the past. It doesn’t feel safe to install cursor anymore.

More people complaining:
https://www.reddit.com/r/cursor/comments/1ivkkp4/cursorexe_infected_by_malware
https://www.reddit.com/r/cursor/comments/1iwvat2/malwareransomagentgeneric

2 Likes
13

Cursor should consider this issue. It’s not easy for a company’s security team to authorize software flagged by antivirus, even if it’s from a big corporation. Since Cursor is a small company, authorization is unlikely.

2 Likes
14

This is happening on the latest release as well - CursorUserSetup-x64-0.46.3.exe

15

Is Cursor going to official respond. I feel very uncomfortable, given the widespread reports, just by passsing quarantine. As many stated it was not happening for weeks. Cursor please make an official announcement.

1 Like
16

I don’t really understand on what basis we should consider this a false positive result

Especially if we are talking about three antiviruses