Thanks Edward. I will share your comments with the reporter.
All best,
brynn
-----Original Message-----
From: Eduard Braun
Sent: Tuesday, August 15, 2017 4:02 PM
To: brynn ; Inkscape-Devel
Subject: Re: [Inkscape-devel] Fw: Version 0.92.2 seems infected by malware
Hi brynn,
I checked the 7z archives of both 32-bit and 64-bit builds when
uploading the release (using Virustotal) and there were not even false
positives at the time.
I just checked the files in question again and it seems some search
engines flag the 32-bit version now:
https://www.virustotal.com/de/file/389f5a9cb8516ec508dd31dcb5fc85cf1354a6...
(64 bit)
https://www.virustotal.com/de/file/e2d392c8ecce14fef178f6dc762605bafefeab...
(32 bit)
However those are only heuristic detections (likely the scanners share
an engine, notice the similar names of the detections) and I'm very
confident no malware is contained (I built this specific library
myself). The fact that I built libicu myself can however cause false
positives due to heuristic detections caused by the low spread of those
files (I have that issue all the time when building software - most
virus scanners find it "suspicious" if a binary file is not present on
many other systems which is unavoidable though when the binary is a
brand-new compile).
I always suggest to users with this question to send in the sample to
their virus scanner's virus lab - usually they will add it to their
white-list after determining it's safe.
Regards,
Eduard
Am 15.08.2017 um 20:48 schrieb brynn:
I received this below through Inkscape Community contact form
(another person
who could not figure out how to contact the website).
I'll inform the sender of your reply (replies).
All best,
brynn
-----Original Message----- From: johan_frederik@...1523...
Sent: Tuesday, August 15, 2017 5:26 AM
To: admin@...3472...
Subject: Version 0.92.2 seems infected by malware
Contact Page Form for Inkscape Community
Name: Fred Schouten
Email: johan_frederik@...1523...
IP: 82.95.66.107
Message:
Downloading en subsequently testing the download shows that libicudt58.dll is
infected with malware. At least 10 engines at TotalVirus find a positive at
the moment of testing (aug 15 2017). This is not the case with version 0.92.1.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites,
Slashdot.org!
http://sdm.link/slashdot
_______________________________________________
Inkscape-devel mailing list
Inkscape-devel(a)lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/inkscape-devel