[
https://issues.apache.org/jira/browse/DRILL-7484?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Denys Ordynskiy updated DRILL-7484:
-----------------------------------
Description:
Avast antivirus found Threat "MPPT97:ShellCode-O [Expl]" in the Apache Drill
sources.
File with virus alert:
https://github.com/apache/drill/commits/master/exec/java-exec/src/test/resources/store/pcap/attack-trace.pcap
OS Windows 10.
Free Avast antivirus v.
Steps to reproduce:
Download archive with Drill sources from GitHub
- open Chrome browser;
- go to https://github.com/apache/drill link;
- open the "Clone or download" menu;
- click the "Download ZIP" button and save archive on a disk.
*Expected result* - archive successfully downloaded.
*Actual result* - Chrome browser canceled the download and deleted Drill
sources archive fron the disk. Avast showed an alert window with virus
description. Screenshot is in the attachments.
Clone Drill sources from GitHub using git console version
- open CMD;
- type "git clone https://github.com/apache/drill.git";;
- scan clonned Drill sources folder using Avast antivirus.
*Expected result* - Viruses were absent.
*Actual result* - Avast showed an alert window with virus description.
Here is the link with report from other antiviruses for this
"attack-trace.pcap" file:
https://r.virscan.org/language/en/report/4df38505462d3afedbbbff3d9217063d
was:
Avast antivirus found Threat "MPPT97:ShellCode-O [Expl]" in the Apache Drill
sources.
File with virus alert:
https://github.com/apache/drill/commits/master/exec/java-exec/src/test/resources/store/pcap/attack-trace.pcap
OS Windows 10.
Free Avast antivirus v.
Steps to reproduce:
Download archive with Drill sources from GitHub
- open Chrome browser;
- go to https://github.com/apache/drill link;
- open the "Clone or download" menu;
- click the "Download ZIP" button and save archive on a disk.
*Expected result* - archive successfully downloaded.
*Actual result* - Chrome browser canceled the download and deleted Drill
sources archive fron the disk. Avast showed an alert window with virus
description. Screenshot is in the attachments.
Clone Drill sources from GitHub using git console version
- open CMD;
- type "git clone https://github.com/apache/drill.git";;
- scan clonned Drill sources folder using Avast antivirus.
*Expected result* - Viruses were absent.
*Actual result* - Avast showed an alert window with virus description.
> Malware found with some antiviruses in the Drill test resources folder
> ----------------------------------------------------------------------
>
> Key: DRILL-7484
> URL: https://issues.apache.org/jira/browse/DRILL-7484
> Project: Apache Drill
> Issue Type: Bug
> Affects Versions: 1.17.0
> Reporter: Denys Ordynskiy
> Priority: Major
> Attachments: photo_2019-12-11_17-07-45.jpg
>
>
> Avast antivirus found Threat "MPPT97:ShellCode-O [Expl]" in the Apache Drill
> sources.
> File with virus alert:
> https://github.com/apache/drill/commits/master/exec/java-exec/src/test/resources/store/pcap/attack-trace.pcap
> OS Windows 10.
> Free Avast antivirus v.
> Steps to reproduce:
> Download archive with Drill sources from GitHub
> - open Chrome browser;
> - go to https://github.com/apache/drill link;
> - open the "Clone or download" menu;
> - click the "Download ZIP" button and save archive on a disk.
> *Expected result* - archive successfully downloaded.
> *Actual result* - Chrome browser canceled the download and deleted Drill
> sources archive fron the disk. Avast showed an alert window with virus
> description. Screenshot is in the attachments.
> Clone Drill sources from GitHub using git console version
> - open CMD;
> - type "git clone https://github.com/apache/drill.git";;
> - scan clonned Drill sources folder using Avast antivirus.
> *Expected result* - Viruses were absent.
> *Actual result* - Avast showed an alert window with virus description.
> Here is the link with report from other antiviruses for this
> "attack-trace.pcap" file:
> https://r.virscan.org/language/en/report/4df38505462d3afedbbbff3d9217063d
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
