Arduino 101 - McAffee reports trojan in arduino101load.exe about arduinocore-arc32 HOT 4 CLOSED

I pulled the source for the 1.6.4+1.19-windows tag and built it. Initially, there were significant differences between the rebuilt binary and the one in GitHub but then I noticed many of them were a build path. Once I renamed the source folder to match the original build folder name then the rebuilt and released binaries match exactly.
This is built on an Ubuntu 12.04 LTS 64-bit with:

• go version go1.5.3 linux/amd64
• mingw-w64 2.0.1-1

from arduinocore-arc32.

It's obviously a false positive, sorry for not reporting it earlier 😄
The build from sources matches with the binary

from arduinocore-arc32.

Good news. Thanks for investigating so promptly. I will report it to McAffee.

from arduinocore-arc32.

The .go scripts in the same directory are the source for the arduino101load.exe for those who want to compile their own copy.

VirusTotal scan detects 8 out of 56 matches which is rather low. Most hits say "proxy" and McAfee-GW-Edition says "BehavesLike.Win32.Downloader.wh". Since arduino101load.exe is used for communicating with the board, I suspect that a code snippet was incorrectly identified as a malicious uploader.

from arduinocore-arc32.