gvim-7-0-118.exe virus found??

2006-10-16 Thread Edward Wong

Dear all,

Just tried downloading gvim-7-0-118 from sourceforge and AVG detects
there is a trojan virus. Can it be a false alarm?

Ed


Re: gvim-7-0-118.exe virus found??

2006-10-16 Thread Benji Fisher
On Mon, Oct 16, 2006 at 03:08:58PM +0800, Edward Wong wrote:
 Dear all,
 
 Just tried downloading gvim-7-0-118 from sourceforge and AVG detects
 there is a trojan virus. Can it be a false alarm?
 
 Ed

 Please be more specific.  Can you give a link to the archive you
downloaded?  Or did you use CVS or SVN (and , if so, what command did
you use)?

HTH --Benji Fisher


Re: gvim-7-0-118.exe virus found??

2006-10-16 Thread Paul Irofti
On Monday 16 October 2006 15:40, Benji Fisher wrote:
 On Mon, Oct 16, 2006 at 03:08:58PM +0800, Edward Wong wrote:
  Dear all,
 
  Just tried downloading gvim-7-0-118 from sourceforge and AVG
  detects there is a trojan virus. Can it be a false alarm?
 
  Ed

  Please be more specific.  Can you give a link to the archive you
 downloaded?  Or did you use CVS or SVN (and , if so, what command did
 you use)?

 HTH   --Benji Fisher

The name of the viril would be good to know also...


Re: gvim-7-0-118.exe virus found??

2006-10-16 Thread A.J.Mechelynck

Benji Fisher wrote:

On Mon, Oct 16, 2006 at 03:08:58PM +0800, Edward Wong wrote:

Dear all,

Just tried downloading gvim-7-0-118 from sourceforge and AVG detects
there is a trojan virus. Can it be a false alarm?

Ed


 Please be more specific.  Can you give a link to the archive you
downloaded?  Or did you use CVS or SVN (and , if so, what command did
you use)?

HTH --Benji Fisher



I suspect it's Steve Hall's build for W32, which is hosted on the sourceforge 
servers nowadays (at 
https://sourceforge.net/project/showfiles.php?group_id=43866package_id=39721 
). If my guess is right, I would expect a false alarm, but I can't guarantee 
that even Steve and SourceForge are immune to virus infestation. If you want 
to suffer from no other viruses than your own ones, you (Edward) can compile 
your own Vim: it is not really hard. See my HowTo page (for Windows it's at 
http://users.skynet.be/antoine.mechelynck/vim/compile.htm ) if you're interested.



Best regards,
Tony.


Re: gvim-7-0-118.exe virus found??

2006-10-16 Thread Steve Hall
On Tue, 2006-10-17 at 00:13 +0200, A.J.Mechelynck wrote:
 Benji Fisher wrote:
  On Mon, Oct 16, 2006 at 03:08:58PM +0800, Edward Wong wrote:
   
   Just tried downloading gvim-7-0-118 from sourceforge and AVG
   detects there is a trojan virus. Can it be a false alarm?
  
  Please be more specific.  Can you give a link to the archive you
  downloaded?  Or did you use CVS or SVN (and , if so, what command
  did you use)?
 
 I suspect it's Steve Hall's build for W32, which is hosted on the
 sourceforge servers nowadays (at

https://sourceforge.net/project/showfiles.php?group_id=43866package_id=39721 
 ). If my guess is right, I would expect a false alarm, but I can't
 guarantee that even Steve and SourceForge are immune to virus
 infestation.

Some anti-virus software mistakenly interprets the Nullsoft installer
as a virus. Just for the record, to date there have been no other
reports regarding this binary (in 468 downloads), and it was created
on a heavily fortified machine that reports nothing either.


-- 
Steve Hall  [ digitect dancingpaper com ]




Re: gvim-7-0-118.exe virus found??

2006-10-16 Thread Edward Wong

Tony is right. I was downloading it from
http://sourceforge.net/project/showfiles.php?group_id=43866package_id=39721

The virus is Trojan horse Downloader.Zlob.CV

Today I just try other different releases, and still find the same
virus in gvim-7-0-135 and gvim-7-0-110.

Thanks for the instruction on compiling my own Vim. Will give it a try
later when I have time.  :)

Ed

On 10/17/06, A.J.Mechelynck [EMAIL PROTECTED] wrote:

Benji Fisher wrote:
 On Mon, Oct 16, 2006 at 03:08:58PM +0800, Edward Wong wrote:
 Dear all,

 Just tried downloading gvim-7-0-118 from sourceforge and AVG detects
 there is a trojan virus. Can it be a false alarm?

 Ed

  Please be more specific.  Can you give a link to the archive you
 downloaded?  Or did you use CVS or SVN (and , if so, what command did
 you use)?

 HTH   --Benji Fisher


I suspect it's Steve Hall's build for W32, which is hosted on the sourceforge
servers nowadays (at
https://sourceforge.net/project/showfiles.php?group_id=43866package_id=39721
). If my guess is right, I would expect a false alarm, but I can't guarantee
that even Steve and SourceForge are immune to virus infestation. If you want
to suffer from no other viruses than your own ones, you (Edward) can compile
your own Vim: it is not really hard. See my HowTo page (for Windows it's at
http://users.skynet.be/antoine.mechelynck/vim/compile.htm ) if you're 
interested.


Best regards,
Tony.