bugGNU Octave - Bugs: bug #48530, share/nsis/Bin/zip2exe.exe : virus...

 
 

bug #48530: share/nsis/Bin/zip2exe.exe : virus positive in mxe with --enable-windows64 build

Submitter:  Tatsuro MATSUOKA <tmacchant>
Submitted:  Sat 16 Jul 2016 02:08:32 AM UTC
   
 
Category:  Configuration and Build System Severity:  3 - Normal
Priority:  5 - Normal Item Group:  Other
Status:  Fixed Assigned to:  lostbard
Originator Name:  Open/Closed:  * Closed
Release:  * other Operating System:  * Microsoft Windows
Fixed Release:  None Planned Release:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Thu 24 Nov 2016 08:12:48 AM UTC, comment #6: 

My corporate proxy still sees https://ftp.gnu.org/gnu/octave/windows/octave-4.2.0-w64-installer.exe as spyware and won't let me download it. w32 download worked fine.

I couldn't really check the installer on VirusTotal as the file size is above 32MB:

https://www.virustotal.com/en/url/2760f2e0e8dd6aa33cd4d2ecce6a67239241065310ae9d96146389c2f91441f7/analysis/

Anonymous
Wed 20 Jul 2016 12:44:48 AM UTC, comment #5: 

I have deleted usr/x86_64-w64-mingw32/share/nsis and execute hg pull, hg update, autoconf, and configure and make nsis-installer.

The new installer file does not contain share/nsis directory.
Thus the problem no longer will happen.

Please change status from Ready For Test to Fixed and close this report.

Tatsuro MATSUOKA <tmacchant>
Tue 19 Jul 2016 08:49:43 PM UTC, comment #4: 
John Donoghue <lostbard>
Group Member
Mon 18 Jul 2016 12:35:52 AM UTC, comment #3: 

comment #2

I agree with not including the nsis files in the installer ant it is practical solution for this issue.

Tatsuro MATSUOKA <tmacchant>
Sun 17 Jul 2016 12:19:36 PM UTC, comment #2: 

I dont think any of the nsis files are needed except for generating the installer in linux, so it could probally be changed to not install any of those files, and save a little on installer exe size.

John Donoghue <lostbard>
Group Member
Sat 16 Jul 2016 11:23:26 PM UTC, comment #1: 

Workaround is to delete usr/x86_64-w64-mingw32/share/nsis/Bin/zip2exe.exe and execute "make nsis-installer".
Then the installer file does not contain zip2exe.exe.

Fortunately zip2exe.exe is not related to octave execution.

Tatsuro MATSUOKA <tmacchant>
Sat 16 Jul 2016 02:08:32 AM UTC, original submission:  

David reported that in the below octave ML thread

http://octave.1599824.n4.nabble.com/octave-4-0-3-64-bit-binaries-for-windows-td4678168.html

share/nsis/Bin/zip2exe.exe in my 64 bit binary distribution is virus positive

The results by the Virus Total [1],

13/52 (positive/total)


Positive
AVware   Trojan.Win32.Generic!BT 20160714
Ad-Aware Gen:Trojan.Heur.TP.dGW@bGmqrldi 20160714
AegisLab Gen.Troj.Heur!c 20160714
Arcabit        Trojan.Heur.TP.EC6D1F 20160714
BitDefender Gen:Trojan.Heur.TP.dGW@bGmqrldi        20160714
Bkav W32.Clodc24.Trojan.00ac        20160714
Cyren W32/Trojan.CFSU-7961        20160714
Emsisoft Gen:Trojan.Heur.TP.dGW@bGmqrldi (B)        20160714
F-Secure Gen:Trojan.Heur.TP.dGW@bGmqrldi        20160714
GData Gen:Trojan.Heur.TP.dGW@bGmqrldi 20160714
eScan Gen:Trojan.Heur.TP.dGW@bGmqrldi 20160714
Symantec Trojan.Gen.2 20160714
VIPRE Trojan.Win32.Generic!BT 20160714

Nagative
ALYac  20160714
AVG  20160714
AhnLab-V3  20160714
Alibaba  20160714
Antiy-AVL  20160714
Avast  20160714
Baidu  20160714
CAT-QuickHeal  20160714
CMC  20160714
ClamAV  20160714
Comodo  20160714
DrWeb  20160714
ESET-NOD32  20160714
F-Prot  20160714
Fortinet  20160714
Ikarus  20160714
Jiangmin  20160714
K7AntiVirus  20160714
K7GW  20160714
Kaspersky  20160714
Kingsoft  20160715
Malwarebytes  20160714
McAfee  20160714
McAfee-GW-Edition  20160714
Microsoft  20160714
NANO-Antivirus  20160714
Panda  20160714
Qihoo-360  20160715
SUPERAntiSpyware  20160714
Sophos  20160714
Tencent  20160715
TheHacker  20160714
TrendMicro  20160714
TrendMicro-HouseCall  20160714
VBA32  20160714
ViRobot  20160714
Zillya  20160714
Zoner  20160714
nProtect  20160714


I have built 32bit octave-4.0.3 for windows by mxe-octave,
and scanned share/nsis/Bin/zip2exe.exe by the Viurs Total.
No positive results appeared, which is the same as that in octave-4.0.3 in octave official site.

The executable zip2exe.exe is 32bit application and may be produced by mingw w64 gcc with muliti-lib on 64 bit build. I suspect that the difference is occurred that cause may cause (perhaps false) positive on some virus software.



[1] https://www.virustotal.com/

Tatsuro MATSUOKA <tmacchant>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by lostbard (Posted a comment)
  • -email is unavailable- added by tmacchant (Submitted the item)
  • -email is unavailable- added by tmacchant (Person who pointed out the issue)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only group members can vote.

     

    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-07-20 lostbard StatusReady For Test Fixed
        Open/ClosedOpen Closed
    2016-07-19 lostbard StatusNone Ready For Test
        Assigned toNone lostbard
    2016-07-16 tmacchant Carbon-Copy- Added davidcoe <david.coe@live.co.uk>

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code