lhmouse / nano-win

GNU nano text editor for Windows [WARNING: The master branch is constantly rebased and force-pushed so don't expect it to be steady!! -end WARNING]
https://files.lhmouse.com/nano-win/
GNU General Public License v3.0
210 stars 25 forks source link

Latest build identified as malware #30

Closed Van-Dame closed 2 years ago

Van-Dame commented 3 years ago

Today I updated the nano package from 5.7-34 to 5.8-44 via scoop. After the update package file (nano-win_9672_v5.8-44-gc04962b5e.7z) downloaded, the antivirus immediately triggered,

The file C:\Users\Van-Dame\scoop\apps\nano\5.8-44\pkg_i686-w64-mingw32\bin\nano.exe is infected with Gen:Variant.Fragtor.11006 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

I ran virustotal on the package where 8 / 57 marked this as malicious (https://www.virustotal.com/gui/file/fc93c4fca5abbd80ed5b799af7753002c14c14f16989b05ab5b102fd5efbc2a5/detection).

It is highly unlikely (imo) that this package contains said malware, but the malware class identified makes me wary to install (ransomware).

lhmouse commented 3 years ago

Why don't you try building one yourself? :)

Van-Dame commented 2 years ago

The said file is no longer being detected as malware. Thank you to whoever got this fixed!