0

When I tried to install Go programming language, Kaspersky AV in my system detected a path to file: C:\Go\pkg\tool\windows_amd64\trace.exe as suspicious one and triggered a virus alert. my doubt is shall I consider this as a false positive alert or any threats associated with the detected object. Kindly help me with answers.

0

If you downloaded the installer from a trusted site via https connection then it's almost definitely a false positive. This is a known problem.

  • Yes it is.I downloaded the same from a trusted source and alert triggered after that. Anyway , considering it a s a false positive. Thanks for your answer mate. – PentestLover Jul 21 '18 at 13:20
0

Programs that inspects other programs are almost certainly under heavy watch by antivirus softwares, because inspection allows stealing data and altering process execution logic.

This include debuggers (e.g. your "trace.exe"), and cygwin1.dll (which use debugging system functions to implement the fork() system call, the memory-refilling part to be specific) among others.

However, major commercial software vendors are often whitelisted (e.g. MS Visual Studio).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.