what is x.exe in golang 1.9.1 sdk for windows? antiviruses complain

780 views
Skip to first unread message

Igor Maznitsa

unread,
Oct 14, 2017, 3:36:42 AM10/14/17
to golang-nuts
today a user of my golang plugin for maven reported that his AVG antivirus had detected some potential malware application x.exe inside automatically downloaded golang sdk for windows (it had been downloaded from the official golang site of course), I made some investigation of sdk archives and was surprised to detect some x.exe file inside go1.9.1.windows-386.zip (also it is presented in amd64 version for windows) the path of the file inside archive is /go/src/cmd/go/x.exe , the file is not presented in 1.9 and also I don't see any similar file in the version for Linux, so the question what is the file? the Totalscan site shows terrible result of scanning of the file for i386

Dave Cheney

unread,
Oct 14, 2017, 4:51:16 AM10/14/17
to golang-nuts
Thank you for finding this. Please raise an issue https://golang.org/issue/new.

Igor Maznitsa

unread,
Oct 14, 2017, 5:06:14 AM10/14/17
to golang-nuts

Lars Seipel

unread,
Oct 14, 2017, 6:40:56 PM10/14/17
to Igor Maznitsa, golang-nuts
On Sat, Oct 14, 2017 at 12:36:42AM -0700, Igor Maznitsa wrote:
> the version for Linux, so the question what is the file? the Totalscan site
> shows terrible result of scanning of the file for i386

I especially like the "unsafe" and "malicious_confidence_100%" labels
these scanners give to trivial hello-world-style binaries you upload
there.

I have no idea how their heuristics work but they could drastically
improve on their false positive rate by replacing them with a coin toss.
Reply all
Reply to author
Forward
0 new messages