[GH-ISSUE #106] Windows Defender detecting the .exe as trojan #26

Closed
opened 2026-09-29 12:58:45 +00:00 by slurdge · 4 comments
Owner

Originally created by @departet on GitHub (Jan 28, 2023).
Original GitHub issue: https://github.com/slurdge/goeland/issues/106

Just wanted to let you know windows defender detects the exe as a trojan:win32/Watac.B!ml

grafik

Originally created by @departet on GitHub (Jan 28, 2023). Original GitHub issue: https://github.com/slurdge/goeland/issues/106 Just wanted to let you know windows defender detects the exe as a trojan:win32/Watac.B!ml ![grafik](https://user-images.githubusercontent.com/68166825/215293036-c64074c7-66a1-43fc-9446-1188f4e56c85.png)
Author
Owner

@slurdge commented on GitHub (Jan 29, 2023):

Thanks for the heads up. I don't know why it would be flagged but I will investigate.

<!-- gh-comment-id:1407625698 --> @slurdge commented on GitHub (Jan 29, 2023): Thanks for the heads up. I don't know why it would be flagged but I will investigate.
Author
Owner

@slurdge commented on GitHub (Jan 29, 2023):

It seems it has to do with the fact that I pack the exe with upx. I do this to conserve bandwidth as golang programs can be quite large... If you uncompress it with upx -d <goeland.exe> I do not have the warning anymore

<!-- gh-comment-id:1407627269 --> @slurdge commented on GitHub (Jan 29, 2023): It seems it has to do with the fact that I pack the exe with upx. I do this to conserve bandwidth as golang programs can be quite large... If you uncompress it with `upx -d <goeland.exe>` I do not have the warning anymore
Author
Owner

@departet commented on GitHub (Jan 29, 2023):

I guessed it was a false positive already. Searching the web for the definition gives a lot of results where people experienced this with selfwritten software.

<!-- gh-comment-id:1407681524 --> @departet commented on GitHub (Jan 29, 2023): I guessed it was a false positive already. Searching the web for the definition gives a lot of results where people experienced this with selfwritten software.
Author
Owner

@slurdge commented on GitHub (Oct 27, 2023):

I've removed UPX for now.

<!-- gh-comment-id:1783032406 --> @slurdge commented on GitHub (Oct 27, 2023): I've removed UPX for now.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: slurdge/goeland#26
No description provided.