Hi :) /usr/share/doc/lilypond/html/Documentation/user/baer-flat-gray.pdf from the 64 Studio 3.0-beta3 install was detected as malware.
I'm sure this tiny pic is not malware, anyhow I'll inform you about this and I removed it from my install. I didn't attached the file, but below there is the information I sent to the vendor of the used antivir software. Cheers, Ralf -------- Original Message -------- Subject: [Fwd: Suspected False Positive (Not Maleware)] Date: Tue, 19 May 2009 01:47:25 +0200 From: Ralf Mardorf <[email protected]> To: [email protected] Pardon, it's a file from this install: http://download.linuxaudio.org/64studio/64studio_3.0-beta3_amd64.iso -------- Original Message -------- Subject: Suspected False Positive (Not Maleware) Date: Tue, 19 May 2009 01:43:28 +0200 From: Ralf Mardorf <[email protected]> To: [email protected] Hello :) there seems to be a wrong detection of a file from an http://download.linuxaudio.org/64studio/64studio_3.0-beta3_i386.iso install. The 7z packed file /usr/share/doc/lilypond/html/Documentation/user/baer-flat-gray.pdf is attached and protected by the asked password "infected". There is little chance that this file is malware ;). With kind regards, Ralf Mardorf PS: A copy of the terminal outputs 64studio:/home/spinymouse# antivir @/home/spinymouse/av-spinymouse-xp-de.rsp /mnt/studio32 AntiVir / Linux Version 2.1.12-161 Copyright (c) 2008 by Avira GmbH. All rights reserved. VDF-Version: 7.1.3.223 erzeugt 18 May 2009 Ausschließlich für privaten, nicht-kommerziellen Gebrauch bestimmt. AntiVir-Lizenz: 149996 für Avira AntiVir PersonalEdition Classic Schließe /sys/ vom Scan aus (ist ein spezielles FS) Schließe /proc vom Scan aus (ist ein spezielles FS) Prüfe Laufwerk/Pfad (list): /mnt/studio32 /mnt/studio32/usr/share/doc/lilypond/html/Documentation/user/baer-flat-gray.pdf Datum: 21.01.2008 Zeit: 23:15:05 Größe: 64917 ALERT: [HEUR/HTML.Malware] /mnt/studio32/usr/share/doc/lilypond/html/Documentation/user/baer-flat-gray.pdf <<< Enthält verdächtigen Code: HEUR/HTML.Malware ALERT-URL: http://www.avira.com/de/threats?q=HEUR%2FHTML%2EMalware --------- Suchergebnisse --------- Verzeichnisse: 10888 Gescannte Dateien: 139510 Alarme: 0 Verdächtig: 1 Repariert: 0 Gelöscht: 0 Umbenannt: 0 Verschoben: 0 Benötigte Zeit: 00:12:07 ---------------------------------- Vielen Dank für den Einsatz von AntiVir. 64studio:/home/spinymouse# mv -T /mnt/studio32/usr/share/doc/lilypond/html/Documentation/user/baer-flat-gray.pdf /home/spinymouse/baer-flat-gray.pdf 64studio:/home/spinymouse# 7z a -p PASSWORD_IS_infected.7z /home/spinymouse/baer-flat-gray.pdf 7-Zip 4.43 beta Copyright (c) 1999-2006 Igor Pavlov 2006-09-15 p7zip Version 4.43 (locale=en_US.UTF-8,Utf16=on,HugeFiles=on,2 CPUs) Scanning Creating archive PASSWORD_IS_infected.7z Enter password (will not be echoed) : Compressing baer-flat-gray.pdf Everything is Ok 64studio:/home/spinymouse# cat /home/spinymouse/av-spinymouse-xp-de.rsp --scan-mode=all -s -z --archive-max-size=0 --archive-max-recursion=0 --archive-max-ratio=0 --archive-max-count=1024000 --scan-in-mbox --heur-macro --heur-level=3 -nolnk -v -dmse -lang=DE --with-alltypes --alert-urls=yes --warnings-as-alerts --exclude=/mnt/win_d/win_xp_pro_jan2009_after_WaldorfAttack_before_music1.tib --exclude=/mnt/win_d/win_xp_pro_jan2009_after_WaldorfAttack_before_music2.tib --exclude=/mnt/win_d/win_xp_pro_jan2009_after_WaldorfAttack_before_music3.tib _______________________________________________ 64studio-users mailing list [email protected] http://lists.64studio.com/mailman/listinfo/64studio-users
