Antivirus false positive on Caddy

Just a heads-up…

Eset Smart Security has just flagged my Caddy (v2.75 - a useful reminder that I should update!) as being suspicious, being a variant of what they call “Win32/Packed.GoLang_AGen.AQ”. It offers to delete it, but fortunately gives me the option not to…

Paul

It’s unfortunately a thing with software written in Go. Because Go compiles to a single binary that includes all of the Go runtime etc. lots of different software, including actual malware written in Go, can look the same to a virus checker and it gets false positives. I’ve seen similar threads in other software projects forums.

As xtaz said, this is common for Go binaries. It’s frustrating how naive anti virus software is. It seems they only offer the “restore from quarantine” as the solution.

1 Like

Anti-virus software is a scam, and this is one reason why.

Thanks for the heads up. Hopefully AV vendors will fix their products.

1 Like