help-octave
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Spyware in Octave


From: Labitt, Bruce
Subject: RE: Spyware in Octave
Date: Wed, 17 Sep 2008 09:53:35 -0400

I ran the version of sed.exe that installs in c:\Program
Files\Octave\bin on the scanner below and came up with one of the AV
programs indicating it was suspicious.

VirSCAN.org Scanned Report :
Scanned time   : 2008/09/17 09:43:30 (EDT)
Scanner results: 3% Scanner(1/36) found malware!
File Name      : sed.exe
File Size      : 102400 byte
File Type      : PE32 executable for MS Windows (console) Intel 80386
32-bit
MD5            : df03c9fb9ebcbf8364cd8874583790b9
SHA1           : 2b3eebc9994b595ef81a5d684fc87f62e6ba3247
Online report  :
http://virscan.org/report/0a85e2e2bb20e977f32ef16548e6393b.html

Scanner        Engine Ver      Sig Ver           Sig Date    Time   Scan
result
a-squared      4.0.0.14        2008.09.16        2008-09-16  1.54   -
AhnLab V3      2008.09.17.02   2008.09.17        2008-09-17  0.94   -
AntiVir        7.8.1.28        7.0.6.170         2008-09-17  2.29   -
Arcavir        1.0.5           200809171009      2008-09-17  1.22   -

<snip>

Fortinet       2.81-3.113      9.560             2008-09-17  0.19
Suspicious
McAfee         5.3.00          5385              2008-09-16  1.86   -
Microsoft      1.3903          2008.09.17        2008-09-17  4.54   -
<snip>

sed.exe appears to be installed in two places.  The 100K file is in the
Octave\bin directory.  There is also another sed.exe that is installed
in the Octave\mysys\bin directory which is only 47K.  Only the
Octave\bin\sed.exe is flagged as being suspicious.


-----Original Message-----
From: dbateman [mailto:address@hidden 
Sent: Wednesday, September 17, 2008 2:07 AM
To: address@hidden
Subject: Re: Spyware in Octave


sed is a classic unix command and stands for stream editor. It is also
part
of the MSYS/MINGW project and we just take their binaries. It is
necessary
for the help system of Octave as it is used to add macros to the help
txt of
functions before streamng that text to makeinfo for formatting. That
being
said it not impossible its infected, but I seriously suspect that your
virus/spyware definition file is flagging a false positive. 

Try uploading sed.exe from this install to http://virscan.org which will
test it against a plethora of different scanners. I suspect they only a
couple will give a positive result.

D.
-- 
View this message in context:
http://www.nabble.com/Spyware-in-Octave-tp19524451p19525898.html
Sent from the Octave - General mailing list archive at Nabble.com.

_______________________________________________
Help-octave mailing list
address@hidden
https://www-old.cae.wisc.edu/mailman/listinfo/help-octave



reply via email to

[Prev in Thread] Current Thread [Next in Thread]