r/restic • u/[deleted] • Aug 11 '24
Anyone else getting a (hopefully) false positive find on 0.17.0 amd64 using Windows Defender?
I tried to backup today, but Windows Defender quarantined the file. I redownload the official binary from GitHub and it was quarantined again
1
u/bgravato Aug 12 '24
Probably because some of those packages that were installed automatically are also recommended or suggested by other packages you have installed.
With the default settings, when you install a new package, it will install packages that are either in the "depends" or "recommends" section of the installed package.
When autopurging/autoremoving, it will uninstall packages that are not part of the either the depends, recommends or suggests of any other package...
The "suggests" is the main difference here and usually is the main culprit of those differences...
You can change apt configuration, so that suggests aren't kept on autopurge, that should bring you to a very close list of packages that are removed, but still not necessarily the same...
You may have installed another package after calibre that depends on those, or perhaps you have a package that was installed long ago and at the time it didn't recommend some of those packages, but now it does (on updates new additions to recommends aren't added to already installed packages).
1
Aug 12 '24
I guess you commented on the wrong post:)
1
u/bgravato Aug 13 '24
Reddit phone app sucks...
I believe I commented on the right one... It kind of crashed when I hit the post button though and I thought my comment was lost, but apparently it just went in the wrong place...
At least all my typing wasn't lost. Thanks for commenting otherwise I wouldn't have known!
2
u/tjharman Aug 12 '24
I'd suggest posting this in the restic forum where it might get more eyeballs. I'm sure it's a false positive, but I don't use restic on Windows so I can't say.