[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Spyware in Octave
From: |
Labitt, Bruce |
Subject: |
RE: Spyware in Octave |
Date: |
Wed, 17 Sep 2008 09:53:35 -0400 |
I ran the version of sed.exe that installs in c:\Program
Files\Octave\bin on the scanner below and came up with one of the AV
programs indicating it was suspicious.
VirSCAN.org Scanned Report :
Scanned time : 2008/09/17 09:43:30 (EDT)
Scanner results: 3% Scanner(1/36) found malware!
File Name : sed.exe
File Size : 102400 byte
File Type : PE32 executable for MS Windows (console) Intel 80386
32-bit
MD5 : df03c9fb9ebcbf8364cd8874583790b9
SHA1 : 2b3eebc9994b595ef81a5d684fc87f62e6ba3247
Online report :
http://virscan.org/report/0a85e2e2bb20e977f32ef16548e6393b.html
Scanner Engine Ver Sig Ver Sig Date Time Scan
result
a-squared 4.0.0.14 2008.09.16 2008-09-16 1.54 -
AhnLab V3 2008.09.17.02 2008.09.17 2008-09-17 0.94 -
AntiVir 7.8.1.28 7.0.6.170 2008-09-17 2.29 -
Arcavir 1.0.5 200809171009 2008-09-17 1.22 -
<snip>
Fortinet 2.81-3.113 9.560 2008-09-17 0.19
Suspicious
McAfee 5.3.00 5385 2008-09-16 1.86 -
Microsoft 1.3903 2008.09.17 2008-09-17 4.54 -
<snip>
sed.exe appears to be installed in two places. The 100K file is in the
Octave\bin directory. There is also another sed.exe that is installed
in the Octave\mysys\bin directory which is only 47K. Only the
Octave\bin\sed.exe is flagged as being suspicious.
-----Original Message-----
From: dbateman [mailto:address@hidden
Sent: Wednesday, September 17, 2008 2:07 AM
To: address@hidden
Subject: Re: Spyware in Octave
sed is a classic unix command and stands for stream editor. It is also
part
of the MSYS/MINGW project and we just take their binaries. It is
necessary
for the help system of Octave as it is used to add macros to the help
txt of
functions before streamng that text to makeinfo for formatting. That
being
said it not impossible its infected, but I seriously suspect that your
virus/spyware definition file is flagging a false positive.
Try uploading sed.exe from this install to http://virscan.org which will
test it against a plethora of different scanners. I suspect they only a
couple will give a positive result.
D.
--
View this message in context:
http://www.nabble.com/Spyware-in-Octave-tp19524451p19525898.html
Sent from the Octave - General mailing list archive at Nabble.com.
_______________________________________________
Help-octave mailing list
address@hidden
https://www-old.cae.wisc.edu/mailman/listinfo/help-octave
- Spyware in Octave, (continued)
- Spyware in Octave, Thomas L. Scofield, 2008/09/16
- Spyware in Octave, Thomas L. Scofield, 2008/09/16
- Spyware in Octave, Thomas L. Scofield, 2008/09/16
- Re: Spyware in Octave, dbateman, 2008/09/17
- RE: Spyware in Octave,
Labitt, Bruce <=
- RE: Spyware in Octave, dbateman, 2008/09/17
- RE: Spyware in Octave, Labitt, Bruce, 2008/09/17
- Re: Spyware in Octave, Michael Goffioul, 2008/09/18
- Re: Spyware in Octave, dbateman, 2008/09/18
Re: Spyware in Octave, Michael Goffioul, 2008/09/18