[ https://issues.apache.org/jira/browse/GROOVY-7900?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15410117#comment-15410117 ]
Keegan Witt commented on GROOVY-7900: ------------------------------------- It's a false positive, but I'm not sure what options I have other than contacting the AV companies and asking them to update their definitions. I tried a fresh build with the new NSIS 3.0 today, and a different set of 3 gave [false positives\https://www.virustotal.com/en/file/b203cccb8ec3ac7b5888e8bf4bc01e32506bfa1e0f18e869c21e2b91a7482216/analysis/1470432834/].. > uninstall.exe possibly contains trojan (or false positive) > ---------------------------------------------------------- > > Key: GROOVY-7900 > URL: https://issues.apache.org/jira/browse/GROOVY-7900 > Project: Groovy > Issue Type: Bug > Affects Versions: 2.4.7 > Environment: Windows 10 > Reporter: Jan-Fabian Humann > > I installed groovy windows installer from the official download page: > http://www.groovy-lang.org/download.html > Kaspersky Endpoint Security 10 flags uninstall.exe in the groovy folder as > Trojan-Ransom.NSIS.Onion.yjd and deletes it. > To verify I installed groovy in a Windows 10 VM without Kaspersky and > uploaded the file to https://www.virustotal.com/ and this is the report I got: > https://virustotal.com/de/file/a3686f92af80b7ad97c4a36065a9468c90b69479105fcc952c2227cd0c4a5548/analysis/ > 3/55 Anti Virus programs flag this file as virus/suspicious. > Could you please investigate whether you download server/install program/etc > has been compromised or it is a false positive? -- This message was sent by Atlassian JIRA (v6.3.4#6332)