Re: [Gimp-user] Virus

[Michael Schumacher <schumaml gmx de>]

On 04/29/2018 11:25 AM, susanem wrote:

> Hi, I have just downloaded the latest version of GIMP fro the GIMP
> downloads page. On trying to install the software, Windows Defender
> popped up with a messge that there was a virus. I said to run anyway.
> AVG blocked the download and quarantined it. I then downloaded GIMP
> from the bittorrent on the downloads page and came up with exactly
> the same problems.

This is because both methods get you the same file - the torrent is set
up to use various mirror servers as web seeds.

The initial anti-virus reports have been a common sight for years, and
are due to the fact that antivirus software is at least partially based
on whitelists and more recently on reputation-based scores, meaning
users of the antivirus software can report whether they consider a file
trustworthy (this is the "FileRep" or "Reputation" 'virus' reports you
might see popping up).

And yes, this means people can attempt to poison such scores.

There more on that here:
https://www.reddit.com/r/GIMP/comments/8fputy/was_gimp_hacked_and_replaced_by_malware/

> I have ran AVG, Malware, CCleaner etc and am left with a file in my
> downloads fold which I cannot delete. It says that it needs
> administrator rights to delete it which it should have as there is
> only administrator on my laptop. The fie says it is 0kb in size but
> actually it is not. If I right clight and run as administrator, I get
> the message that the operation did not complete successfuly as the
> file contains potentially unwanted software or a virus.

It's likely that your AV software is now preventing you from doing
anything with the file, including to delete it. You should update it to
make sure that the false positive is gone.

-- 
Regards,
Michael
GPG: 96A8 B38A 728A 577D 724D 60E5 F855 53EC B36D 4CDD