It's a common enough issue with go that they wrote a faq on it too: https://go.dev/doc/faq#virus