search

pruiz / WkHtmlToXSharp

C# wrapper wrapper (using P/Invoke) for the excelent Html to PDF conversion library wkhtmltopdf library.
239 stars 84 forks source link

My virus scanner found a virus in project files. #43

Closed djdougan closed 7 years ago

djdougan commented 7 years ago

I tried downloading and running example project to see how it works and I got the following message from my virus scanner.

/**/ Category: Trojan Description: This program is dangerous and executes commands from an attacker. Recommended action: Remove this software immediately. Items: file:C:\Users\name\Desktop\WkHtmlToXSharp-master\Packages\NuGet.CommandLine.1.6.0\tools\NuGet.exe Get more information about this item online.

pruiz commented 7 years ago

Wops.. looks like a false positive, but let me check the file.

pruiz commented 7 years ago

Looks like a FP from your virus software. As here's a (clean) virtus total report for this file: https://www.virustotal.com/en/file/6f61761bedcf06db6faac87470eb8027376e60ab201b4667f33d1a161f4ea2f7/analysis/

Please, make an md5sum against your local copy and verify it matches: ea049840f07d8af24dce890f019f0be9

If your local file does not match this md5 hash, I am afraid, it has been tampered by something within your computer/network.

djdougan commented 7 years ago

​The WkHtmlToXSharp-master.zip came from the Clone or Download button

On Tue, Jan 31, 2017 at 1:32 PM, Pablo Ruiz García <notifications@github.com

wrote:

Funny thing: \Packages\NuGet.CommandLine.1.6.0\tools\NuGet.exe is not a file downloaded from WkHtmlToXSharp's repo. This is a NuGet package downloaded by your visual studio (I guess from an official repository).

So, or 1) the package has been tampered at it's source location, or 2) you computer/network has some proxy or element manipulating downloaded content, or 3) your virus scanner reported a false positive.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/pruiz/WkHtmlToXSharp/issues/43#issuecomment-276483269, or mute the thread https://github.com/notifications/unsubscribe-auth/AHHeRwY0THAp1tw7WsxqL1GVwGk5vG2Oks5rX5pugaJpZM4LzIwz .

-- Douglas J. Dougan BSc CIS

pruiz commented 7 years ago

Hi @djdougan,

Please, see the linked reference to virustotal from my previous comment. As you can find there, this file is clean (by the 40+ virus scanners run by virus total).

So it looks like something tampered your install. Or your anti-virus is reporting a (weirdo) false positive.