bugmonotone - Bugs: bug #13373, monotone-0.19-setup.exe identified...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #13373: monotone-0.19-setup.exe identified as (probably by mistake)

Submitter:  None
Submitted:  Sun 12 Jun 2005 06:39:14 AM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Invalid
Privacy:  Public Assigned to:  None
Open/Closed:  Closed
mtn version --full: 

monotone-0.19-setup.exe
monotone-0.18-setup.exe

Tue 14 Jun 2005 01:31:05 PM UTC, comment #5: 

One final note for this bug.  McAfee have now recognized and corrected this issue:

http://vil.mcafeesecurity.com/vil/content/v_103069.htm

Jon Bright <sircus>
Group Member
Mon 13 Jun 2005 06:40:49 PM UTC, comment #4: 

Important part is to also set "Closed", I guess :-).  (Yay confusing bug trackers.)

Nathaniel Smith <njs>
Group Member
Mon 13 Jun 2005 05:08:50 PM UTC, comment #3: 

I think we can close this one now.  I've checked the machine for viruses, and found none.  I've also just had a report about this with another application I develop, where the installer was built on a different machine, weeks apart from the time the monotone installer was built.  I've also had a report about an installer built using Inno Setup under Wine on a Linux machine, which I think we can safely assume is not virus-infected.  A search on the Inno Setup ML reveals this to be a problem with McAfee's virus definitions.  See:

http://news.jrsoftware.org/news/innosetup/msg47819.html

Also:

http://news.jrsoftware.org/news/innosetup/msg47805.html

Not sure if "Invalid" is really the right status to set this to.  njs, let me know if I should have done something else? :-)

Jon Bright <sircus>
Group Member
Sun 12 Jun 2005 01:44:29 PM UTC, comment #2: 

We don't (or at least, I don't) use the NSIS stuff - I've used Inno Setup, findable at http://jrsoftware.org

I didn't build the installer on the machine I'm writing this from -  I'll check that machine tomorrow (it's checked regularly in any event and has yet to ever find anything).  Overall, though, I think it's unlikely that this alert is genuine, it sounds very much like a heuristic going wrong.

I think the installer's valuable, particularly to less-experienced first-time users, but we might want to consider additionally providing a .zip file.

Jon Bright <sircus>
Group Member
Sun 12 Jun 2005 09:50:44 AM UTC, comment #1: 

Thanks for the heads up.

http://nsis.sourceforge.net/index.php?id=17&backPID=17&tt_news=24 reports that the NSIS people (whose installer software we use) have been hearing lots of complaints about false alarms lately, and http://virusscan.jotti.org/ 's 10-or-so scanners all seem to think it's okay, so I think this is a false alarm.  But I'll ping Jon, who did those windows builds, just in case... Jon?

Nathaniel Smith <njs>
Group Member
Sun 12 Jun 2005 06:39:14 AM UTC, original submission:  

McAfee VirusScan Enterprise 8.0.0, scan engine 4400, update from 10 june 2005 identifies monotone-0.19-setup.exe (and 0.18 too) as a Generic BackDoor.dr (http://vil.nai.com/vil/content/v_103069.htm)

It does not complain about monotone.exe .

Maybe a zip-file instead of an installer would help.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 4 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2005-06-13 njs Open/ClosedOpen Closed
2005-06-13 sircus StatusNone Invalid
2005-06-12 njs Carbon-Copy- Added -email is unavailable-
2005-06-12 frankw Carbon-Copy- Added -email is unavailable-

Back to the top

Powered by Savane 3.13-4b48.
Corresponding source code