Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-99723

Probable malware false positive in linguist.exe.debug

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P2: Important
    • None
    • 5.15.2
    • Packaging & Installer
    • None
    • Windows

    Description

      Hi, it looks like the Qt 5.15.2 release is triggering what's undoubtedly a false positive antivirus detection on linguist.exe.debug. If possible, as you're the originating authority that can assert it's safe, please report upstream to McAfee:

      https://kc.mcafee.com/corporate/index?page=content&id=KB85567
      https://kc.mcafee.com/corporate/index?page=content&id=KB85568

      Here's the details from McAfee's GTI detection:

      Target Hash:       174ab8c6ac0e8f009a688a1138da76e0
      Target Name:    linguist.exe.debug
      Target Path:       C:\Qt\5.15.2\mingw81_32\bin
      Target File Size (Bytes): 736
      Target Modify Time:       11/6/20 4:54:15 AM EST
      Target Access Time:        11/13/20 1:04:27 AM EST
      Target Create Time:        11/13/20 1:04:27 AM EST
      DAT Version:      4673.0
      Engine Version: 6300.9389
      Threat Target File Path:
      C:\Qt\5.15.2\mingw81_32\bin\linguist.exe.debug
      Threat Name:    Artemis!174AB8C6AC0E
      Threat Type:      Trojan

       
      Current analysis of linguist.exe.debug on VirustTotal 

      This appears to be forum post concerning the current detection:
      https://forum.qt.io/topic/132759/trojan-detected-in-linguist-exe

      Cheers!
      Sean

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            aksalova Akseli Salovaara
            brlcad C.S. Morrison
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes