Re: [Gimp-user] Virus

[Joel Rees <joel rees gmail com>]

On Mon, Apr 30, 2018 at 6:22 PM, Michael Schumacher <schumaml gmx de> wrote:
> On 04/29/2018 11:25 AM, susanem wrote:
>
> > Hi, I have just downloaded the latest version of GIMP fro the GIMP
> > downloads page. On trying to install the software, Windows Defender
> > popped up with a messge that there was a virus. I said to run anyway.
> > AVG blocked the download and quarantined it. I then downloaded GIMP
> > from the bittorrent on the downloads page and came up with exactly
> > the same problems.
>
> This is because both methods get you the same file - the torrent is set
> up to use various mirror servers as web seeds.
>
> The initial anti-virus reports have been a common sight for years, and
> are due to the fact that antivirus software is at least partially based
> on whitelists and more recently on reputation-based scores, meaning
> users of the antivirus software can report whether they consider a file
> trustworthy (this is the "FileRep" or "Reputation" 'virus' reports you
> might see popping up).
>
> And yes, this means people can attempt to poison such scores.
>
> There more on that here:
> https://www.reddit.com/r/GIMP/comments/8fputy/was_gimp_hacked_and_replaced_by_malware/
> > I have ran AVG, Malware, CCleaner etc and am left with a file in my
> > downloads fold which I cannot delete. It says that it needs
> > administrator rights to delete it which it should have as there is
> > only administrator on my laptop. The fie says it is 0kb in size but
> > actually it is not. If I right clight and run as administrator, I get
> > the message that the operation did not complete successfuly as the
> > file contains potentially unwanted software or a virus.
>
> It's likely that your AV software is now preventing you from doing
> anything with the file, including to delete it. You should update it to
> make sure that the false positive is gone.

Is the MSWindows world that seriously bad these days, that you don't
bother asking what site it was downloaded from, what the hash was,
etc.?


-- 
Joel Rees

One of these days I'll get someone to pay me
to design a language that combines the best of Forth and C.
Then I'll be able to leap wide instruction sets with a single #ifdef,
run faster than a speeding infinite loop with a #define,
and stop all integer size bugs with my bare cast.
http://defining-computers.blogspot.com/2017/06/reinventing-computers.html

More of my delusions:
http://reiisi.blogspot.com/2017/05/do-not-pay-modern-danegeld-ransomware.html
http://reiisi.blogspot.jp/p/novels-i-am-writing.html