Hi Tal, The Google Code FAQ provides answers to your questions, see http://code.google.com/p/support/wiki/FAQ. If Google finds that your project contains malicious files it will take it offline temporarily and wait for it to be cleaned. You shouldn’t be worried to lose your files should that happen, however it’s always a good thing to have backups, on github or somewhere else.
As for us, we mostly report projects that are created solely to host malware so it shouldn’t create problems for legitimate users of the service. Regards, Sébastien From: Tal Dayan [mailto:[email protected]] Sent: Monday, August 20, 2012 1:37 PM To: [email protected] Cc: Sébastien Duquette Subject: Re: Google Code malware report 2012-08-19 Hi Sebastian, I am looking at these malware notices and they made we worry. Does it mean that google can shut down any project's repository, with no advance notice, because it was classified as malware? If so, what are the avenues to appeal such decisions? I use google code as the sole repository for my open source app but start thinking about having a independent repository such as github mirroring it. Thanks, Tal On Monday, August 20, 2012 8:11:25 AM UTC-7, Sébastien Duquette wrote: Hi, Malware was detected on the following projects. Project: ebankvtc199 URL: http://ebankvtc199.googlecode.com/files/fifaonline.com Detection name: Trojan.Win32/Spy.PerfKey.NAA Date Seen: 2012-08-17 SHA1: 92B5787894EB8E9D428EAA716B8C25B4886CC3E8 Project: chomeo-1 URL: http://chomeo-1.googlecode.com/files/SolarModz 6117 ( by www.chomeo.us<http://www.chomeo.us> ).rar Detection name: Trojan.Win32/VB.QKI Date Seen: 2012-08-18 SHA1: 8E128E772939405E071F4D7670FEFAAC7CD30459 Project: gamehot2012 URL: http://gamehot2012.googlecode.com/files/Hack CF Full By AnhTrang VCF 1108.zip Detection name: Trojan.Win32/VB.OSK Date Seen: 2012-08-18 SHA1: FDB85EB53581F777C33D5DE35C619739E951E5A1 Project: hotrogamefile URL: http://hotrogamefile.googlecode.com/files/SupperPlugin.com Detection name: Trojan.Win32/Spy.PerfKey.NAA Date Seen: 2012-08-19 SHA1: 69688F607920EED833F479BDABEFF0875B958A90 Project: bangtieu URL: http://bangtieu.googlecode.com/files/VideoClip.jar Detection name: Trojan.J2ME/TrojanSMS.Agent.DB Date Seen: 2012-08-19 SHA1: ED74763E443A9F3899030593DDB4AD140CB65040 Project: hotrovtc-hackwall URL: http://hotrovtc-hackwall.googlecode.com/files/VTC.exe Detection name: Trojan.Win32/Spy.PerfKey.NAA Date Seen: 2012-08-19 SHA1: 8DAC13BCDF57D3DE81A35E9451183130B2E9401F Project: hackgameno1 URL: http://hackgameno1.googlecode.com/files/Killmark.zip Detection name: Trojan.Win32/Spy.SCKeyLog.O Date Seen: 2012-08-20 SHA1: 5751D2E3E5DBE8D65C5503CAE1A62013A2B4D02C Project: hotromanhlong URL: http://hotromanhlong.googlecode.com/files/Auto ManhLongTranhBa.exe Detection name: Trojan.Win32/Spy.SCKeyLog.O Date Seen: 2012-08-20 SHA1: 95BC478B788D59238267EF6D69B7C4B4D609B762 Regards -- Sebastien Duquette Malware Researcher ESET Canada -- You received this message because you are subscribed to the Google Groups "Project Hosting on Google Code" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-code-hosting?hl=en.
