bugmonotone - Bugs: bug #13373, monotone-0.19-setup.exe identified...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #13373: monotone-0.19-setup.exe identified as (probably by mistake)

Submitted by:  None
Submitted on:  Sun 12 Jun 2005 06:39:14 AM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Invalid
Privacy: PublicAssigned to: None
Open/Closed: Closed
mtn version --full: 

monotone-0.19-setup.exe
monotone-0.18-setup.exe

Tue 14 Jun 2005 01:31:05 PM UTC, comment #5:

One final note for this bug. McAfee have now recognized and corrected this issue:

http://vil.mcafeesecurity.com/vil/content/v_103069.htm

Jon Bright <sircus>
Project Member
Mon 13 Jun 2005 06:40:49 PM UTC, comment #4:

Important part is to also set "Closed", I guess :-). (Yay confusing bug trackers.)

Nathaniel Smith <njs>
Project Member
Mon 13 Jun 2005 05:08:50 PM UTC, comment #3:

I think we can close this one now. I've checked the machine for viruses, and found none. I've also just had a report about this with another application I develop, where the installer was built on a different machine, weeks apart from the time the monotone installer was built. I've also had a report about an installer built using Inno Setup under Wine on a Linux machine, which I think we can safely assume is not virus-infected. A search on the Inno Setup ML reveals this to be a problem with McAfee's virus definitions. See:

http://news.jrsoftware.org/news/innosetup/msg47819.html

Also:

http://news.jrsoftware.org/news/innosetup/msg47805.html

Not sure if "Invalid" is really the right status to set this to. njs, let me know if I should have done something else? :-)

Jon Bright <sircus>
Project Member
Sun 12 Jun 2005 01:44:29 PM UTC, comment #2:

We don't (or at least, I don't) use the NSIS stuff - I've used Inno Setup, findable at http://jrsoftware.org

I didn't build the installer on the machine I'm writing this from - I'll check that machine tomorrow (it's checked regularly in any event and has yet to ever find anything). Overall, though, I think it's unlikely that this alert is genuine, it sounds very much like a heuristic going wrong.

I think the installer's valuable, particularly to less-experienced first-time users, but we might want to consider additionally providing a .zip file.

Jon Bright <sircus>
Project Member
Sun 12 Jun 2005 09:50:44 AM UTC, comment #1:

Thanks for the heads up.

http://nsis.sourceforge.net/index.php?id=17&backPID=17&tt_news=24 reports that the NSIS people (whose installer software we use) have been hearing lots of complaints about false alarms lately, and http://virusscan.jotti.org/ 's 10-or-so scanners all seem to think it's okay, so I think this is a false alarm. But I'll ping Jon, who did those windows builds, just in case... Jon?

Nathaniel Smith <njs>
Project Member
Sun 12 Jun 2005 06:39:14 AM UTC, original submission:

McAfee VirusScan Enterprise 8.0.0, scan engine 4400, update from 10 june 2005 identifies monotone-0.19-setup.exe (and 0.18 too) as a Generic BackDoor.dr (http://vil.nai.com/vil/content/v_103069.htm)

It does not complain about monotone.exe .

Maybe a zip-file instead of an installer would help.

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 4 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Mon 13 Jun 2005 06:40:49 PM UTCnjsOpen/ClosedOpen=>Closed
Mon 13 Jun 2005 05:08:50 PM UTCsircusStatusNone=>Invalid
Sun 12 Jun 2005 09:50:44 AM UTCnjsCarbon-Copy-=>Added -unavailable-
Sun 12 Jun 2005 07:40:22 AM UTCfrankwCarbon-Copy-=>Added -unavailable-

Back to the top


Powered by Savane 3.1-cleanup1