Is anyone else seeing AVG alerts with Go 1.3 windows_amd64 build binaries?

[Chris Hines]

I have AVG AntiVirus on two different Windows 7 machines (work and personal) and both installations report a FakeAlert.RT trojan horse on any .exe built by the Go 1.3 gc toolchain. I did not get these alerts with Go 1.2.x built binaries.

Is anyone else getting these alerts?

Thanks,

Chris

[John C.]

I get these alerts for nm.exe and some other build tools, but not on the executables I build myself.  I'm on Win7-64.

[DisposaBoy]

These are most like false positives and have been an issue with various AV packages for years. I think the best thing to do is to report this to the AV creator(s).

[Maxim Khitrov]

Yep, Avast was detecting "Threat:Win64:Evo-gen [Susp]" in _cgo_.o for
one of my packages:

https://github.com/mxk/go-sqlite/issues/4#issuecomment-45665777

[Andrew Gerrand]

We've had a long history of these kinds of reports. Go binaries are not normal-looking EXEs because our generated code looks different to that of other popular compilers like MSVC++ or gcc.

Try submitting the suspect file to a service like https://www.virustotal.com/ If it's not picked up by at least one other vendor, it's probably a false positive.

Please report the false positive to your AV vendor.

Andrew