I got access to wifi.  Here is the info provided by sourceforge
PathScan DateVulnerability FoundWhitelisted
oorexx-buildutils/1.2.0/Nsis_longStrings.zip
<https://sourceforge.net/projects/oorexx/files/oorexx-buildutils/1.2.0//>
2016-02-21 Win.Adware.Oneinstaller FOUND -
oorexx/5.0.0alpha/oorexx5_win32_r11024.zip
<https://sourceforge.net/projects/oorexx/files/oorexx/5.0.0alpha//>
2016-04-24 infected: Gen:Variant.Razy.19005 -
oorexx/5.0.0alpha/oorexx5_win32_r11047.zip
<https://sourceforge.net/projects/oorexx/files/oorexx/5.0.0alpha//>
2016-06-14 infected: Gen:Variant.Razy.19005 -
windows-build-tools/1.0/Nsis_longStrings.zip
<https://sourceforge.net/projects/oorexx/files/windows-build-tools/1.0//>
2016-02-21 Win.Adware.Oneinstaller FOUND -

also sourceforge reports this archive damaged.
oorexx/3.2.0/ooRexx-3.2.0-2-i386-MacOSX.dmg
<https://sourceforge.net/projects/oorexx/files/oorexx/3.2.0//>
2016-05-29 archive
damaged


I downloaded the above 4 zip files and scanned them with Avast which found
no threats.  Sourceforge uses bitdefender, but does not reveal which member
of the archive the supposed threat is found in.

Scanning my working copy I see that Avast reports that
incubator\samples\ooDialog\ResourceEditors\openWatcom.dll has a suspected
threat Win32:evo-gen[Susp]:

Perhaps someone with another virus scanner could download and check the
above files.

Hth

Jon



On 15 June 2016 at 22:17, Moritz Hoffmann <[email protected]> wrote:

> It seems quite a few scanners actually detect something [1]. Someone
> interested could now go off and check every individual exe/dll file in the
> archive...
> Moritz
>
>
>
> [1]
> https://www.virustotal.com/en/file/eb98e666930e73dbb7f2652a143d7715109547c15ea47c740d6853056e7d5731/analysis/
>
> On Wed, Jun 15, 2016 at 1:06 PM, Jon Wolfers <[email protected]> wrote:
>
>> Hi Erich,
>>
>> I'm away from home till Sunday night with only access through my phone.
>> Can Les answer this one?
>>
>> Thanks
>> Jon
>> On Jun 15, 2016 8:31 PM, "Erich Steinböck" <[email protected]>
>> wrote:
>>
>>> | Which location are you getting these from, Gil?
>>> Flags show up in the "files" oorexx/5.0.0alpha folder
>>>
>>> All files were uploaded by me - they're just the raw zipped contents
>>> from a build.
>>>
>>> Seems that sourceforge scans files since a few weeks:
>>>
>>> https://sourceforge.net/blog/sourceforge-now-scans-all-projects-for-malware-and-displays-warnings-on-downloads/
>>>
>>> Jon, do you as an admin see what is described here,
>>> "Project admins will get an additional dashboard that will provide more
>>> in-depth details on why a file was flagged and how to address it. Project
>>> admins will also be able to submit a support request related to any issue
>>> detected by the scanners, and they’ll also be able to request a file be
>>> whitelisted once we’ve reviewed it."
>>>
>>> Erich
>>>
>>> On Wed, Jun 15, 2016 at 8:40 PM, René Jansen <[email protected]> wrote:
>>>
>>>> Which location are you getting these from, Gil?
>>>>
>>>> René.
>>>>
>>>> > On 15 jun. 2016, at 16:18, Gil Barmwater <[email protected]>
>>>> wrote:
>>>> >
>>>> > Two of the 5.0.0 Alpha zip files have a malware flag on them. Any
>>>> idea why?
>>>> >
>>>> > --
>>>> >
>>>> > Gil Barmwater
>>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>>> traffic
>>> patterns at an interface-level. Reveals which users, apps, and protocols
>>> are
>>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>> planning
>>> reports.
>>> http://pubads.g.doubleclick.net/gampad/clk?id=1444514421&iu=/41014381
>>> _______________________________________________
>>> Oorexx-devel mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>>>
>>>
>>
>> ------------------------------------------------------------------------------
>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>> traffic
>> patterns at an interface-level. Reveals which users, apps, and protocols
>> are
>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>> planning
>> reports.
>> http://pubads.g.doubleclick.net/gampad/clk?id=1444514421&iu=/41014381
>> _______________________________________________
>> Oorexx-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>>
>>
>
>
> --
> Moritz Hoffmann;
> http://antiguru.de/
>
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://pubads.g.doubleclick.net/gampad/clk?id=1444514421&iu=/41014381
_______________________________________________
Oorexx-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oorexx-devel

Reply via email to