rust-lang / rust-lang/rustup

rustup-init.exe x86_64-pc-windows-gnu flagged as virus

Open
#4,891 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

not-rustup question
Dominant language
Rust
Stars
7k
Forks
1.1k
Avg merge
22h 40m
Merged PRs (30d)
46

Description

Verification
Problem

The rustup-init.exe binary for x86_64-pc-windows-gnu is flagged as a virus by multiple scanners/vendors:

The MSVC-based target ( x86_64-pc-window-msvc) has only one negative ("LIKELY_MALICOUS") verdict:

Steps
  1. Download binary from https://static.rust-lang.org/rustup/dist/x86_64-pc-windows-gnu/rustup-init.exe
  2. Upload to scanning website
  3. Read report.
Possible Solution(s)

No response

Notes

No response

Rustup version
1.29
Installed toolchains
-
OS version
-

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by downloading rustup-init.exe from the x86_64-pc-windows-gnu URL and review the linked MetaDefender and VirusTotal reports. Compare those findings with the x86_64-pc-windows-msvc reports, then trace the rustup release or build path to identify what can be verified. Done should include a documented cause and a verified outcome for the affected binary.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
release, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.