From: Jason Rumney <jasonr@gnu.org>
To: Angelo Graziosi <Angelo.Graziosi@roma1.infn.it>
Cc: emacs-devel@gnu.org
Subject: Re: False positive in emacs-22.2-bin-i386.zip?
Date: Mon, 02 Jun 2008 22:39:33 +0100 [thread overview]
Message-ID: <48446895.3020308@gnu.org> (raw)
In-Reply-To: <Pine.CYG.4.58.0806021900530.2676@homepc>
Angelo Graziosi wrote:
> After unpacking
> ftp://ftp.gnu.org/gnu/emacs/windows/emacs-22.2-bin-i386.zip, running under
> Cygwin,
>
> $ clamscan -r emacs-22.2
>
> the result is:
>
> ...
> emacs-22.2/bin/ddeclient.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/digest-doc.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/hexl.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/sorted-doc.exe: Trojan.Hijacker.Qhost FOUND
> ...
>
I fed ddeclient.exe to the online scanner at http://virusscan.jotti.org/
(and others which only run one virus scanner on the file). ClamAV was
the only scanner to report anything, so I think it was likely a false
positive. The report from the above website was:
POSSIBLY INFECTED/MALWARE (Note: this file was only classified as
malware by scanners known to generate more false positives than the
average scanner. Do not consider these results definately accurate.
Also, because of this, results of this scan will not be recorded in the
database.)
next prev parent reply other threads:[~2008-06-02 21:39 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-06-02 17:10 False positive in emacs-22.2-bin-i386.zip? Angelo Graziosi
2008-06-02 21:39 ` Jason Rumney [this message]
2008-06-06 21:17 ` Jason Rumney
2008-06-07 7:02 ` Angelo Graziosi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/emacs/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=48446895.3020308@gnu.org \
--to=jasonr@gnu.org \
--cc=Angelo.Graziosi@roma1.infn.it \
--cc=emacs-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).