Re: [Help-glpk] Trojan Horse in Gusek

[Yingjie Lan]

Hi Xypron,

Thanks a lot for this information, I downloaded the fciv.exe from microsoft and run the check:

C:\Documents and Settings\dell\My Documents\Downloads>fciv gusek_0-2-12.zip

//

// File Checksum Integrity Verifier version 2.05.

//

65227b950b02efd6f42f91238cb60134 gusek_0-2-12.zip

which agrees with the MD5 sum you provided. So it is probably the case that my antivirus system is raising a false flag.

Best regards,

Yingjie

---

From: glpk xypron <address@hidden>
To: Yingjie Lan <address@hidden>; address@hidden
Sent: Tuesday, September 6, 2011 1:42 PM
Subject: Re: [Help-glpk] Trojan Horse in Gusek

Hello Yingjie,

thank you for reporting the issue.

I guess you downloaded from Sourceforge.net?

If so, please, address the problem to Sourceforge. Please, indicate
the virus scanner you used.

Sourceforge diffuses software to a lot of different servers which are
not run by Sourceforge. When downloading from Sourceforge a server is
chosen for download. It is possible that one of those servers is
compromised.

After downloading you should check the MD5 and SHA1 checksums
provided on the files tab of the project.

gusek_0-2-12.zip
SHA1:
b46950b4d407950604eeb8b5e535012b21803d09
MD5:
65227b950b02efd6f42f91238cb60134

Microsoft offers a tool File Checksum Integrity Verifier (fciv) for
calculating the check sums.

Trendmicro OfficeScan did not find a Trojan in
http://downloads.sourceforge.net/project/gusek/gusek/0.2.12/gusek_0-2-12.zip?r=http%3A%2F%2Fsourceforge.net%2Fprojects%2Fgusek%2F&ts=1315286544&use_mirror=netcologne

Please, observe:
It is also possible that your virus scanner is creating a false
positive result.

Best regards

Xypron

-------- Original-Nachricht --------
> Datum: Mon, 5 Sep 2011 19:21:55 -0700 (PDT)
> Betreff: [Help-glpk] Trojan Horse in Gusek

> Hi,
>
> I just downloaded Gusek 0.2.12, and when I run it, a Trojan horse named
> HEUR/Malware.QVM10.Gen was caught by my antivirus system. The malware was
> found in the GLPSOL.exe file came with Gusek. Any idea?
>
> Yingjie

--
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de