Re: [OctDev] my virusscanner found a Worm in octave.exe

[scott carter nk]

I found it in 3.0.0 and 3.0.1 with Avira AntiVir, but only with the latest
VDFs (7.0.4.218 and 7.0.4.232).  
Files that are detected are all in /bin: octave.exe, octave-3.0.0.exe, and
octave-3.0.1.exe
For me the installer itself (octave-3.0.1-setup.exe and
octave-3.0.0-setup.exe) do not trigger a detection.
I found several copies at what was apparently a Trojan dropper which had the
same virus signature detection at several points in my System Restore
checkpoint files, all created since I installed 3.0.0 (but some older than
my installation of 3.0.1)

Note - neither Symantec nor Trend Micro (web-based scan versions of each)
report a detection.

Note: installing from the VS2008 installer (octave-3.0.1-vs2008-setup.exe) I
do not repeat not get any detections.


Michael Goffioul-2 wrote:
> 
> On Fri, Jun 20, 2008 at 9:00 PM, Michael Goffioul
> <address@hidden> wrote:
>> Apparently, this problem appeared recently as this problem has
>> been reported a few time since the beginning of this week. My
>> virsu scanner does not detect any problem, so I would like to request
>> some feedback from other Windows users
>>
>> 1) Is this worm new?
>>
>> 2) What AV software detect it?
>>
>> 3) Could anyone with McAfee or Norton check the executables
>> (the latest VS2008 executable was built on a regularly updated
>> McAfee-protected system)
>>
>> 4) Could people who detected the worm check older executables?
>> (like the 2.9.x series)
> 
> Additional info: the first report was about the installer executable
> (not the installed octave.exe). Could people also check recent
> (3.0.x) and older (2.9.x) installers?
> 
> Michael.
> 
> 

-- 
View this message in context: 
http://www.nabble.com/Re%3A--OctDev--my-virusscanner-found-a-Worm-in-octave.exe-tp18035615p18037262.html
Sent from the Octave - Maintainers mailing list archive at Nabble.com.