all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* False positive in emacs-22.2-bin-i386.zip?
@ 2008-06-02 17:10 Angelo Graziosi
  2008-06-02 21:39 ` Jason Rumney
  2008-06-06 21:17 ` Jason Rumney
  0 siblings, 2 replies; 4+ messages in thread
From: Angelo Graziosi @ 2008-06-02 17:10 UTC (permalink / raw)
  To: emacs-devel


After unpacking
ftp://ftp.gnu.org/gnu/emacs/windows/emacs-22.2-bin-i386.zip, running under
Cygwin,

$ clamscan -r emacs-22.2

the result is:

...
emacs-22.2/bin/ddeclient.exe: Trojan.Hijacker.Qhost FOUND
emacs-22.2/bin/digest-doc.exe: Trojan.Hijacker.Qhost FOUND
emacs-22.2/bin/hexl.exe: Trojan.Hijacker.Qhost FOUND
emacs-22.2/bin/sorted-doc.exe: Trojan.Hijacker.Qhost FOUND
...

----------- SCAN SUMMARY -----------
Known viruses: 306133
Engine version: 0.93
Scanned directories: 43
Scanned files: 2777
Infected files: 4
Data scanned: 129.43 MB
Time: 32.375 sec (0 m 32 s)

'clamscan' belongs to clamav-0.93-1 package in Cygwin.


Cheers,
   Angelo.




^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: False positive in emacs-22.2-bin-i386.zip?
  2008-06-02 17:10 False positive in emacs-22.2-bin-i386.zip? Angelo Graziosi
@ 2008-06-02 21:39 ` Jason Rumney
  2008-06-06 21:17 ` Jason Rumney
  1 sibling, 0 replies; 4+ messages in thread
From: Jason Rumney @ 2008-06-02 21:39 UTC (permalink / raw)
  To: Angelo Graziosi; +Cc: emacs-devel

Angelo Graziosi wrote:
> After unpacking
> ftp://ftp.gnu.org/gnu/emacs/windows/emacs-22.2-bin-i386.zip, running under
> Cygwin,
>
> $ clamscan -r emacs-22.2
>
> the result is:
>
> ...
> emacs-22.2/bin/ddeclient.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/digest-doc.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/hexl.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/sorted-doc.exe: Trojan.Hijacker.Qhost FOUND
> ...
>   

I fed ddeclient.exe to the online scanner at http://virusscan.jotti.org/ 
(and others which only run one virus scanner on the file). ClamAV was 
the only scanner to report anything, so I think it was likely a false 
positive. The report from the above website was:

 POSSIBLY INFECTED/MALWARE (Note: this file was only classified as 
malware by scanners known to generate more false positives than the 
average scanner. Do not consider these results definately accurate. 
Also, because of this, results of this scan will not be recorded in the 
database.)





^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: False positive in emacs-22.2-bin-i386.zip?
  2008-06-02 17:10 False positive in emacs-22.2-bin-i386.zip? Angelo Graziosi
  2008-06-02 21:39 ` Jason Rumney
@ 2008-06-06 21:17 ` Jason Rumney
  2008-06-07  7:02   ` Angelo Graziosi
  1 sibling, 1 reply; 4+ messages in thread
From: Jason Rumney @ 2008-06-06 21:17 UTC (permalink / raw)
  To: Angelo Graziosi; +Cc: emacs-devel

Angelo Graziosi wrote:
> $ clamscan -r emacs-22.2
>
> the result is:
>
> ...
> emacs-22.2/bin/ddeclient.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/digest-doc.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/hexl.exe: Trojan.Hijacker.Qhost FOUND
> emacs-22.2/bin/sorted-doc.exe: Trojan.Hijacker.Qhost FOUND
> ...
>   

This seems to be resolved in the latest ClamAV virus database. Thanks 
for reporting it.





^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: False positive in emacs-22.2-bin-i386.zip?
  2008-06-06 21:17 ` Jason Rumney
@ 2008-06-07  7:02   ` Angelo Graziosi
  0 siblings, 0 replies; 4+ messages in thread
From: Angelo Graziosi @ 2008-06-07  7:02 UTC (permalink / raw)
  To: Jason Rumney; +Cc: emacs-devel


On Fri, 6 Jun 2008, Jason Rumney wrote:

> This seems to be resolved in the latest ClamAV virus database.

GOOD news!!!

Thanks,
    Angelo.





^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2008-06-07  7:02 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-06-02 17:10 False positive in emacs-22.2-bin-i386.zip? Angelo Graziosi
2008-06-02 21:39 ` Jason Rumney
2008-06-06 21:17 ` Jason Rumney
2008-06-07  7:02   ` Angelo Graziosi

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.