What I'm doing is just downloading the files, with AVG 7.5.476
installed with virus database version 269.10.14/912. It could very
well be a false alarm from the antivirus software. I'll try other AV
and see if it detects the same thing.

Is it possible that the trojanhorse gets there before the GPG
signature created thus making the signature to validate the
trojanhorse as well??

-Diky-

On 7/22/07, Lari Huttunen <[EMAIL PROTECTED]> wrote:
> On 12:22:09 2007-07-22 "Diky Mulyana" <[EMAIL PROTECTED]> wrote:
> > does anyone experience this? I installed AVG antivirus, and it caught
> > Downloader.Zlob.MCQ Trojan horse inside those two installers. Is it
> > just a false alarm or what?
>
> Could you be a bit more specific? Running either of the
> installers did not exhibit any malicious characteristics.
> Moreover, for what its worth, the PGP signatures on both of the
> packages match.
>
> /scratch$ gpg --verify winbacula-2.0.2.exe.sig
> gpg: Signature made Sun 28 Jan 2007 01:36:03 PM EET using DSA key ID
> 10A792AD
> gpg: Good signature from "Bacula Distribution Verification Key
> (www.bacula.org)"
>
> /scratch$ gpg --verify winbacula-2.0.3.exe.sig
> gpg: Signature made Wed 14 Mar 2007 12:08:59 AM EET using DSA key ID
> 10A792AD
> gpg: Good signature from "Bacula Distribution Verification Key
> (www.bacula.org)"
>
> Sincerely,
>
> Lari Huttunen
> --
> "Entropy device is blocking.
> Dance fandango on keyboard to unblock."
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to