[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[d-bugmail--- via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

Basile-z  changed:

   What|Removed |Added

 CC|b2.t...@gmx.com |

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

Vladimir Panteleev  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 CC||dlang-bugzilla@thecybershad
   ||ow.net
 Resolution|--- |WORKSFORME

--- Comment #9 from Vladimir Panteleev  ---
Is this still a problem?

Generally, false positives need to be reported to the antivirus vendor. Reports
from end-users are more effective than reports from the software's authors, so
generally (aside from code signing, possibly), there is nothing that could be
done from D's side.

I'll close this for now as the bug is close to being a year old; please reopen
if this false positive (Win32/Ipac.B!cl) still affects current releases of DMD.

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

--- Comment #8 from anonymous4  ---
About signing:
http://robert.ocallahan.org/2017/01/disable-your-antivirus-software-except.html
>Several times AV software blocked Firefox updates

But firefox components are all signed.

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

--- Comment #7 from Sobirari Muhomori  ---
I uploaded only ddemangle.exe

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

Martin Nowak  changed:

   What|Removed |Added

 CC||c...@dawg.eu

--- Comment #6 from Martin Nowak  ---
(In reply to Sobirari Muhomori from comment #5)
> I uploaded the file at
> https://www.microsoft.com/en-us/security/portal/submission/submit.aspx for
> online scan with microsoft antivirus and it tells that the file is not
> detected.

How did you manage to upload the installer exe that is bigger than 10MB?

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

--- Comment #5 from Sobirari Muhomori  ---
I uploaded the file at
https://www.microsoft.com/en-us/security/portal/submission/submit.aspx for
online scan with microsoft antivirus and it tells that the file is not
detected.

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

b2.t...@gmx.com changed:

   What|Removed |Added

 CC||b2.t...@gmx.com

--- Comment #4 from b2.t...@gmx.com ---
(In reply to Jonathas from comment #3)
> Created attachment 1610 [details]
> After installing it
> 
> I disabled Windows defender and installed, now the antivirus kicks in again
> complaining about one of the files that the installer deployed,
> nsis6-ddemangle.exe. Looks like one of the dependencies is infected. My
> antivirus is trying to remove that file.

Waiting for a new setup you can do this instead: remove any previous garbages
and download the 7z archive:
To complete the setup:
- unpack the contained folder where you wished to setup.
- add the path of the sub-directory named "bin" (the one that contains dmd.exe,
ddemangle.exe, etc) to the system PATH.

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

--- Comment #3 from Jonathas  ---
Created attachment 1610
  --> https://issues.dlang.org/attachment.cgi?id=1610=edit
After installing it

I disabled Windows defender and installed, now the antivirus kicks in again
complaining about one of the files that the installer deployed,
nsis6-ddemangle.exe. Looks like one of the dependencies is infected. My
antivirus is trying to remove that file.

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

greenify  changed:

   What|Removed |Added

 CC||greeen...@gmail.com

--- Comment #2 from greenify  ---
This has been reported quite often in the NG too:

https://forum.dlang.org/thread/rsxkofggmjveairlh...@forum.dlang.org

Code signing has been suggested as a possible solution:

https://forum.dlang.org/thread/akxxnjatohebpmhbe...@forum.dlang.org

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

Lodovico Giaretta  changed:

   What|Removed |Added

 CC||lodov...@giaretart.net
   Severity|blocker |critical

--- Comment #1 from Lodovico Giaretta  ---
(In reply to Jonathas from comment #0)
> Downloading the DMD compiler version 2.071.1 for Windows triggered my
> antivirus system. Please run scans on the offered download version of dmd.

It's a false positive.
It is safe. You can check Martin Novak's signature on it [1].

So the real problem is finding a way to avoid antiviruses from signalling it,
as it's definitely not a virus.

[1] https://dlang.org/gpg_keys.html

--

[Issue 16405] Trojan Win32/Ipac.B!cl detected on dmd-2.071.1.exe

[via Digitalmars-d-bugs]

https://issues.dlang.org/show_bug.cgi?id=16405

Jonathas  changed:

   What|Removed |Added

 CC||jdcbra...@gmail.com

--