Re: [Oorexx-devel] [oorexx:bugs] #1713 Virus in future (beta) version

2020-07-02 Thread P.O. Jonsson
Dear René,

We have had this a couple of times, I have seen it on my Windows machine when 
installing (not when building) as well. I have checked vigorously every time to 
make sure the build machine for Windows is not infected, it is most likely a 
heuristic detection.

I agree completely regarding a release of ooRexx 5, we might have lost a large 
user, the EPO , with more than 4000 ooRexx installations 
still running 4.2. They are now moving to Python from what I have heard.

Regarding running Virus checkers on Jenkins I see no problems in that, I will 
have a look. In my experience it is only Windows that is affected. Setting up a 
job on Jenkins master that runs a virus checker on the slaves should be 
possible I think.

Hälsningar/Regards/Grüsse,
P.O. Jonsson
oor...@jonases.se



> Am 02.07.2020 um 11:09 schrieb René Jansen :
> 
> who has Windows and can confirm? These are mostly false positives, but - 
> Erich and P.O. - is there any possibility to run the viruscheckers on this 
> file before we upload to SourceForge, and skip the uploads if we have a 
> (false) positive? This is a reputation issue and I tend to take those very 
> seriously.
> 
> Also, we need a release, seriously. I get email about this, and there better 
> be one before ooRexx slips into oblivion. With these annoying Windows-virus 
> things we would have been better positioned if we already had a 
> non-virus-flagged, released version. There was a lot of work done on 
> documentation, and it is up to us to decide what the showstoppers are now.
> 
> From where I stand, which is in Enterprise IT, it is much more important to 
> get the release into the Linux repositories than any download. I would like 
> to start a taskforce for that, I think we have the contacts. Please 
> volunteeer.
> 
> P.O., it is possible to have a setup with various virus-checkers to run on 
> Jenkins so we can get clarity on what the cause is (‘heuristics’) and how to 
> squelch it? You will be reimbursed if any cost is incurred.
> 
> René.
> 
>> Begin forwarded message:
>> 
>> From: "Doug L" > >
>> Subject: [oorexx:bugs] #1713 Virus in future (beta) version
>> Date: 1 July 2020 at 19:58:42 CEST
>> To: "Ticket #1713: Virus in future (beta) version" 
>> <1...@bugs.oorexx.p.re.sourceforge.net 
>> >
>> Reply-To: "Ticket #1713: Virus in future (beta) version" 
>> <1...@bugs.oorexx.p.re.sourceforge.net 
>> >
>> 
>> [bugs:#1713]  Virus in future 
>> (beta) version
>> 
>> Status: open
>> Group: Next_Release
>> Created: Wed Jul 01, 2020 05:58 PM UTC by Doug L
>> Last Updated: Wed Jul 01, 2020 05:58 PM UTC
>> Owner: nobody
>> 
>> When I download 
>> https://sourceforge.net/projects/oorexx/files/oorexx/5.0.0beta/ooRexx-5.0.0-12096.windows.x86_32.exe/download
>>  
>> 
>>  my Microsoft virus scanner says it has a virus (like earlier, recent 
>> versions). I actually had a problem with the 12080 version before it was 
>> flagged on SourceForge.
>> 
>> Sent from sourceforge.net  because you indicated 
>> interest in https://sourceforge.net/p/oorexx/bugs/1713/ 
>> 
>> To unsubscribe from further messages, please visit 
>> https://sourceforge.net/auth/subscriptions/ 
>> 
> 
> ___
> Oorexx-devel mailing list
> Oorexx-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/oorexx-devel

___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel


Re: [Oorexx-devel] [oorexx:bugs] #1713 Virus in future (beta) version

2020-07-02 Thread René Jansen
Hi Erich,

thanks. I’ll write to MS and SourceForge today and register a complaint. I’ll 
also put this in a readme on SourceForge so people are aware.

René.


> On 2 Jul 2020, at 11:40, Erich Steinböck  wrote:
> 
> Hi René, I've removed the build files flagged by Sourceforge as suspicious.
> They were all Trojan.GenericKD, a heuristic detection which sometimes gives a 
> false positive.
> I don't think we can do much to prevent this.
> 
> Sourceforge's Bitdefender doesn't flag ooRexx-5.0.0-12096.windows.x86_32.exe 
> that Doug has reported.
> ___
> Oorexx-devel mailing list
> Oorexx-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/oorexx-devel



___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel