develooper Front page | perl.win32.vanilla | Postings from November 2010

Re: Strawberry 5.10.1.0 (2009/10): presumably mistaken virus detection

Thread Previous
From:
Michiel Beijen
Date:
November 16, 2010 08:38
Subject:
Re: Strawberry 5.10.1.0 (2009/10): presumably mistaken virus detection
Message ID:
AANLkTi=kAQwAcB8HGzSjQxW=Ccg78VSwbrBHBHT41e6o@mail.gmail.com
On Sun, Oct 24, 2010 at 9:06 PM, Thomas L. Shinnick <tshinnic@io.com> wrote:
> My Kaspersky virus detection popped up with
>    10/24/2010 1:33:16 PM       Detected: Worm.Win32.Qvod.chj
> C:\strawberry\perl\bin\a2p.exe
>
> No other files were 'detected'.  The most recent 5.12.1 strawberry had no
> such detection.

I just received a similar 'false positive'  from McAfee on the file
c\bin\xmlcatalog.exe in Strawberry 5.12. The md5 of this file is
b39677b4d1731a888c909f0e4d86cf36. According to the VirusTotal website
more than one vendor thinks it's a virus, but McAfee is the most
prominent one. See for the report:
http://www.virustotal.com/file-scan/report.html?id=f62576f055199e4a7dba50e8e1a581834b4dcc17208ce14ba337573c588bd36b-1289897357

I filed a dispute with McAfee via their web form on
http://www.mcafee.com/us/threat_center/dispute/dispute_form.asp but
usually processing takes long.

BTW I tested the a2p.exe from Perl 5.12.2 with the virustotal site,
and their Kaspersky	7.0.0.125	2010.11.15 scanner does not see an issue
with it.

Regards,

Mike.

Thread Previous


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About