Re: [Gimp-user] Update blocked by trend micro

[Baz Shaw <bshaw53 att net>]

Here is the report

Report from Trend Micro antivirus during download:

 Time: 11/11/2021 16:36
File: gimp-2.20.28-setup.exe-part
Threat: TSPY.Win32.TRX.XXPE50FSX016E0002
Action: Quarantined




Sent from my iPhone

> On Nov 13, 2021, at 7:42 PM, Joel Rees via gimp-user-list <gimp-user-list gnome org> wrote:
>
> On Fri, Nov 12, 2021 at 7:21 AM James Moe via gimp-user-list
> <gimp-user-list gnome org> wrote:
> > > On 2021-11-11 15:02, Baz Shaw wrote:
> > >
> > > I just tried to download the latest update from
> > >
> > > https://download.gimp.org/mirror/pub/gimp/v2.10/windows/gimp-2.10.28-setup.exe
> > > It was blocked by trend micro with this report:
> >  Report was removed?
>
> It would be interesting to see the actual report.
>
> >  Is "trend micro" a firewall product?
>
> Trend Micro is a Japanese company specializing cyber security, FWIW.
>
> > If so, you may need to whitelist gimp.org.
>
> Yeah.
>
> Or if Baz wants to be a little more sure that there is no
> man-in-the-middle or DNS cache poisoning, explicitly identifying
> mirrors and checking their stated checksums for the download against
> the checksum he gets on what he downloaded can give a reasonable level
> of confidence. When I do that, it takes me an hour or two of hunting
> around the web for the mirrors and the checksums and digging up the
> MSWindows command.
>
> (I've posted a page somewhere to remind myself and forgotten where I
> posted it, so I usually end up looking for it on Microsoft's sites
> again. FCIV is old news, BTW. Here's the command:
>
> certutil -hashfile filename MD5
>
> or whatever. But SHA-1 is better than MD5.)
>
> -- 
> Joel Rees
>
> http://reiisi.blogspot.jp/p/novels-i-am-writing.html
> _______________________________________________
> gimp-user-list mailing list
> List address:    gimp-user-list gnome org
> List membership: https://mail.gnome.org/mailman/listinfo/gimp-user-list
> List archives:   https://mail.gnome.org/archives/gimp-user-list