search

lbellonda / qxmledit

QXmlEdit XML editor. Downloads: https://sourceforge.net/projects/qxmledit/files
http://qxmledit.org
Other
164 stars 48 forks source link

Trojan detected #45

Closed gazorg closed 6 years ago

gazorg commented 6 years ago

The Trojan:Win32/Azden.A!cl is detected by windows defender in the QXmlEditInstaller-0.9.9.exe. It would be good with a better distributor for the binaries than Sourceforge which is not useable anymore.

lbellonda commented 6 years ago

Hello, did you check if the sha256 checksum corresponds with the published one in SourceForge and qxmledit.org site? I checked the exe with some antivirus without problems. Can you give me more details?

gazorg commented 6 years ago

Sorry, I deleted the file directly from windows defender and I did not think of that. Now after downloading again I cannot recreate that and the checksum is okay. It might be one of the other mirrors but most likely is probably a false positive followed by updated definitions. That said Sourceforge has bad history...

Thank you for very quick reply!

On Tue, Jan 2, 2018 at 9:17 PM, Luca Bellonda notifications@github.com wrote:

Hello, did you check if the sha256 checksum corresponds with the published one in SourceForge and qxmledit.org site? I checked the exe with some antivirus without problems. Can you give me more details?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/lbellonda/qxmledit/issues/45#issuecomment-354864900, or mute the thread https://github.com/notifications/unsubscribe-auth/ALz5IrVFES52WB2bM2RZed8YCo2LdwGUks5tGo68gaJpZM4RRA9U .

lbellonda commented 6 years ago

Hello, I checked online with www.virustotal.com and locally and the file is OK. The resulting checksum is as published. That said, what is the mirror you used? The link should be in your download manager. I will try to reproduce.

gazorg commented 6 years ago

I think it was the university in Kent, that file was okay now when I checked.

// David

On Tue, Jan 2, 2018 at 9:51 PM, Luca Bellonda notifications@github.com wrote:

Hello, I checked online with www.virustotal.com and locally and the file is OK. The resulting checksum is as published. That said, what is the mirror you used? The link should be in your download manager. I will try to reproduce.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/lbellonda/qxmledit/issues/45#issuecomment-354872108, or mute the thread https://github.com/notifications/unsubscribe-auth/ALz5Ihc9be7jtFwNGSLc0b35_RjdW2Szks5tGpbPgaJpZM4RRA9U .

lbellonda commented 6 years ago

Hello, I verified and all seems ok. If you agree I will close this issue.