Thanks Edward. I will share your comments with the reporter.
All best, brynn
-----Original Message----- From: Eduard Braun Sent: Tuesday, August 15, 2017 4:02 PM To: brynn ; Inkscape-Devel Subject: Re: [Inkscape-devel] Fw: Version 0.92.2 seems infected by malware
Hi brynn,
I checked the 7z archives of both 32-bit and 64-bit builds when uploading the release (using Virustotal) and there were not even false positives at the time.
I just checked the files in question again and it seems some search engines flag the 32-bit version now: https://www.virustotal.com/de/file/389f5a9cb8516ec508dd31dcb5fc85cf1354a6333... (64 bit) https://www.virustotal.com/de/file/e2d392c8ecce14fef178f6dc762605bafefeab1db... (32 bit)
However those are only heuristic detections (likely the scanners share an engine, notice the similar names of the detections) and I'm very confident no malware is contained (I built this specific library myself). The fact that I built libicu myself can however cause false positives due to heuristic detections caused by the low spread of those files (I have that issue all the time when building software - most virus scanners find it "suspicious" if a binary file is not present on many other systems which is unavoidable though when the binary is a brand-new compile).
I always suggest to users with this question to send in the sample to their virus scanner's virus lab - usually they will add it to their white-list after determining it's safe.
Regards, Eduard
Am 15.08.2017 um 20:48 schrieb brynn:
I received this below through Inkscape Community contact form (another person who could not figure out how to contact the website).
I'll inform the sender of your reply (replies).
All best, brynn
-----Original Message----- From: johan_frederik@...1523... Sent: Tuesday, August 15, 2017 5:26 AM To: admin@...3472... Subject: Version 0.92.2 seems infected by malware
Contact Page Form for Inkscape Community Name: Fred Schouten Email: johan_frederik@...1523... IP: 82.95.66.107 Message: Downloading en subsequently testing the download shows that libicudt58.dll is infected with malware. At least 10 engines at TotalVirus find a positive at the moment of testing (aug 15 2017). This is not the case with version 0.92.1.
Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Inkscape-devel mailing list Inkscape-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/inkscape-devel