5 ms·

Windows defenders reports a malware when trying to download the master branch. Now I will be forced to format my company laptop. Great! P.S: The reported virus

Windows defenders reports a malware when trying to download the master branch. Now I will be forced to format my company laptop. Great! P.S: The reported virus is Trojan:Win32/Sprinsky.

tinodotim 10y ago
Probably a false-positive: https://virustotal.com/en/file/504f86c07384b93800120b182a81ebf2af9200ed4a77ce807f0c21e51bf86284/analysis/1487431934/ https://virustotal.com/en/file/504f86c07384b93800120b182a81e... Webroot Heuristic goes riot on the Resurrectio_LICENSE.GPL file in the chrome plugin. Only file that is "infected". (See File Details on Virustotal) Without it: https://virustotal.com/en/file/44f9ffa063cf3f2e23dfedef81150fa1f433d8bf3c3f49d74592771768d15488/analysis/1487432121/ https://virustotal.com/en/file/44f9ffa063cf3f2e23dfedef81150... But of course: no warranty. EDIT: It's also probably Win32/Sprisky instead of SpriNsky. https://duckduckgo.com/?q=win32+sprisky&t=hb&ia=web https://duckduckgo.com/?q=win32+sprisky&t=hb&ia=web Looks more and more like a false positive, happened also with the/a GnuPG Installer for Windows: http://gnupg.10057.n7.nabble.com/Trojan-detected-in-Windows-10-Simple-Installer-for-GnuPG-Modern-td50896.html http://gnupg.10057.n7.nabble.com/Trojan-detected-in-Windows-...
- darfs 10y ago
  Is the snake oil srsly attacking a GPL-License File? That has so much potential for jokes... ^^
deleted 10y ago
[deleted]
ge96 10y ago
Why use your company laptop
swznd 10y ago
it's look false positive. windows defender too lazy to check properly. if you download javascript file have combinations of XMLHttpRequest or UNIX new line or web links, it will detected as malware or trojan.
downandout 10y ago
Why on earth would you format it if Windows Defender caught the "virus" (in this case a false positive) before you had a chance to run it? As long as you haven't run it (php in this case, so you'd have to have run them on a local web server), even if there were a virus, you could simply delete the file without opening/running it and you wouldn't have an issue. I also have to know...if you think you have to format the laptop whenever a file you haven't run is detected to be a virus, how many hours have you spent doing this useless exercise?
kensoh 10y ago
Hi register, I'm sorry for the trouble of false-positive. I have closed the issue raised with the following remark. Thanks to tinodotim, downandout, swznd and all for helping to isolate the cause! https://github.com/tebelorg/TA.Gui/issues/8 https://github.com/tebelorg/TA.Gui/issues/8 Issue and cause found by Hacker News users - https://news.ycombinator.com/item?id=13674669 https://news.ycombinator.com/item?id=13674669 Resurrectio_LICENSE.GPL is cloned from Resurrectio project. I will temporarily remove this file and contact Eric Brehault. I would still like to use the original copy of his license instead of adding a new general GPLv2.
- kensoh 10y ago
  Eric has provided an updated license which is verified to yield no false-positive. Has committed and updated the issue with URL of the scan results - https://github.com/tebelorg/TA.Gui/issues/8 https://github.com/tebelorg/TA.Gui/issues/8

Windows defenders reports a malware when trying to download the master branch. Now I will be forced to format my company laptop. Great! P.S: The reported virus is Trojan:Win32/Sprinsky.

tinodotim 10y ago

Probably a false-positive: https://virustotal.com/en/file/504f86c07384b93800120b182a81ebf2af9200ed4a77ce807f0c21e51bf86284/analysis/1487431934/ https://virustotal.com/en/file/504f86c07384b93800120b182a81e... Webroot Heuristic goes riot on the Resurrectio_LICENSE.GPL file in the chrome plugin. Only file that is "infected". (See File Details on Virustotal) Without it: https://virustotal.com/en/file/44f9ffa063cf3f2e23dfedef81150fa1f433d8bf3c3f49d74592771768d15488/analysis/1487432121/ https://virustotal.com/en/file/44f9ffa063cf3f2e23dfedef81150... But of course: no warranty. EDIT: It's also probably Win32/Sprisky instead of SpriNsky. https://duckduckgo.com/?q=win32+sprisky&t=hb&ia=web https://duckduckgo.com/?q=win32+sprisky&t=hb&ia=web Looks more and more like a false positive, happened also with the/a GnuPG Installer for Windows: http://gnupg.10057.n7.nabble.com/Trojan-detected-in-Windows-10-Simple-Installer-for-GnuPG-Modern-td50896.html http://gnupg.10057.n7.nabble.com/Trojan-detected-in-Windows-...

darfs 10y ago
Is the snake oil srsly attacking a GPL-License File? That has so much potential for jokes... ^^

deleted 10y ago

[deleted]

ge96 10y ago

Why use your company laptop

swznd 10y ago

it's look false positive. windows defender too lazy to check properly. if you download javascript file have combinations of XMLHttpRequest or UNIX new line or web links, it will detected as malware or trojan.

downandout 10y ago

Why on earth would you format it if Windows Defender caught the "virus" (in this case a false positive) before you had a chance to run it? As long as you haven't run it (php in this case, so you'd have to have run them on a local web server), even if there were a virus, you could simply delete the file without opening/running it and you wouldn't have an issue. I also have to know...if you think you have to format the laptop whenever a file you haven't run is detected to be a virus, how many hours have you spent doing this useless exercise?

kensoh 10y ago

Hi register, I'm sorry for the trouble of false-positive. I have closed the issue raised with the following remark. Thanks to tinodotim, downandout, swznd and all for helping to isolate the cause! https://github.com/tebelorg/TA.Gui/issues/8 https://github.com/tebelorg/TA.Gui/issues/8 Issue and cause found by Hacker News users - https://news.ycombinator.com/item?id=13674669 https://news.ycombinator.com/item?id=13674669 Resurrectio_LICENSE.GPL is cloned from Resurrectio project. I will temporarily remove this file and contact Eric Brehault. I would still like to use the original copy of his license instead of adding a new general GPLv2.

kensoh 10y ago
Eric has provided an updated license which is verified to yield no false-positive. Has committed and updated the issue with URL of the scan results - https://github.com/tebelorg/TA.Gui/issues/8 https://github.com/tebelorg/TA.Gui/issues/8