rustup-init.exe x86_64-pc-windows-gnu flagged as virus
Open
Nobody has claimed this yet.
not-rustup
question
- Dominant language
- Rust
- Stars
- 7k
- Forks
- 1.1k
- Avg merge
- 22h 40m
- Merged PRs (30d)
- 46
Description
Verification
- I searched for recent similar issues at https://github.com/rust-lang/rustup/issues?q=is%3Aissue and found no duplicates.
- I am on the latest version of Rustup according to https://github.com/rust-lang/rustup/tags and am still able to reproduce my issue.
Problem
The rustup-init.exe binary for x86_64-pc-windows-gnu is flagged as a virus by multiple scanners/vendors:
- https://metadefender.com/results/file/bzI2MDYwM1ZfMHZzcERjYW52R1ZFMmtkZnl2_mdaas
- https://www.virustotal.com/gui/file/03dbaae1d33a4d220bd0d202e5092955dae859c119074192ca513f8c4713fff7
The MSVC-based target ( x86_64-pc-window-msvc) has only one negative ("LIKELY_MALICOUS") verdict:
- https://metadefender.com/results/hash/86478E53F769379D7F0EBFA7C9AA97CB76CA92233F79AA2CC0DBEE2EFAAC73C7
- https://www.virustotal.com/gui/file/86478e53f769379d7f0ebfa7c9aa97cb76ca92233f79aa2cc0dbee2efaac73c7
Steps
- Download binary from https://static.rust-lang.org/rustup/dist/x86_64-pc-windows-gnu/rustup-init.exe
- Upload to scanning website
- Read report.
Possible Solution(s)
No response
Notes
No response
Rustup version
1.29
Installed toolchains
-
OS version
-
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by downloading rustup-init.exe from the x86_64-pc-windows-gnu URL and review the linked MetaDefender and VirusTotal reports. Compare those findings with the x86_64-pc-windows-msvc reports, then trace the rustup release or build path to identify what can be verified. Done should include a documented cause and a verified outcome for the affected binary.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- release, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100