John,
thank you for your reply and guidance.
I'm also exchanging e-mails with Frederick Beckmann and letting him aware of the problem.
As I needed a windows version of PSPP, I could find a clean package in Source Forge.
The url you gave is not a GNU url - all GNU urls are in the domain gnu.org
The domain you mentioned belogs to the Augsburg university of applied sciences,
and I think the binaries there are kindly made available by Frederick Beckmann.
I also find it a very bold claim that this binary contains malware. A bold
claim for which you provide no evidence. I guess you need to contact
Frederick and explain your reasons for believing that this allegation including
the nature of the malware which you are of the opinion is contained within
this binary.
Of course, if you want to be absolutely sure that your software is free
from malware, then you should download the source from ftp.gnu.org, perform a
thorough audit of the source code, and build the software yourself using
trusted tools.
Regards,
John
On Sat, Mar 05, 2022 at 06:21:09PM -0300, Marcus Klein wrote:
Dear GNU,<br />
I downloaded the pspp-64bit-install.exe file from <a href="" xalnkAmvAeSIoaS="https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe">https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe</a><br">https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe">https://caeis.etech.fh-augsburg.de/downloads/windows/1.5.3-g797d4c/pspp-64bit-install.exe</a><br />
and it has a malware with signature W32.649BEE42BD-95.SBX.TG.<br />
Also f_003d6d (not sure if this is a file inside the install package) has the same signature<br />
<br />
Could you please update the compilation and advise?<br />
Thanks in advance.<br />
<br />
Marcus Klein
_______________________________________________
Bug-gnu-pspp mailing list
Bug-gnu-pspp@gnu.org https://lists.gnu.org/mailman/listinfo/bug-gnu-pspp