This will be always notify on my device about the malicious extension named " language_server_windows_x64.exe" and I don’t have a knowledge about that
found User/AppData/Local/Programs/Antigravity IDE/resources/app/extensions/antigravity/bin/
but I didn’t installed any extensions so have been scan it on virustotal as well says “Suspicious.low.ml.score” could someone know that or what happened
Don’t worry, this is a 100% safe false positive. Here is what is happening and why you are seeing this:
1. “Why is it in the extensions folder if I didn’t install any extensions?”
antigravity is a built-in core system extension created by Google that comes pre-packaged with the IDE. It is not an extension you installed from a marketplace—it is the native extension that powers the IDE’s core AI assistant, code completions, and code analysis.
2. What is language_server_windows_x64.exe?
It is the Language Server (LSP) binary. Its job is to:
- Index and read the code files in your open projects.
- Provide real-time autocomplete (ghost text) as you type.
- Feed code context to the AI assistant.
3. Why does your Antivirus (and VirusTotal’s ML) flag it?
- Unsigned Sub-binary: The file is currently packaged without an individual digital Authenticode signature.
- Heuristic Detection: Because the language server opens local IPC sockets and scans thousands of lines of code in the background, heuristic engines (like Avast/AVG Behavior Shield or Trapmine ML) mistake this normal development activity for suspicious behavior (
IDP.Generic or Suspicious.low.ml.score).
- On VirusTotal, all 70+ major antivirus engines (Microsoft Defender, Kaspersky, Bitdefender, etc.) mark it completely clean.
4. How to fix the notification
-
If your antivirus quarantined the file, open your antivirus quarantine vault and click Restore and add exception.
-
Add the Antigravity IDE folder to your antivirus whitelist / exclusions list:
C:\Users\<YourUser>\AppData\Local\Programs\Antigravity IDE\*
Once whitelisted, the notifications will stop and the IDE’s autocomplete and AI features will work normally!