Hello, I downloaded samba-latest.tar.gz from http://us1.samba.org/samba/ftp/ and my anti-virus software said it was infected, but didn't clean it, so I deleted it. I downloaded it onto a Windows NT machine. I don't know whether it's my software freaking out or an actual problem with the file, but I thought I should let you know. Thanks, Dan McManus
On Thu, 26 Apr 2001 dan_mcmanus@co.blm.gov wrote:> Hello, > > I downloaded samba-latest.tar.gz from http://us1.samba.org/samba/ftp/ and > my anti-virus software said it was infected, but didn't clean it, so I > deleted it. I downloaded it onto a Windows NT machine. I don't know whether > it's my software freaking out or an actual problem with the file, but I > thought I should let you know.It's source code. There are no executables in it. What virus scanner are you using? Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 )
Since I just upgraded all my AV yesterday, I redownloaded and checked the file. The latest Mcaffe didn't find anything on it. I do notice that it is different than the one I downloaded earlier. -rw-r--r-- 1 wcolburn daemon 5835120 Apr 17 15:14 samba-2.2.0.tar.gz -rw-r--r-- 1 wcolburn wcolburn 5835104 Apr 26 10:26 samba-latest.tar.gz Theoretically, those should be the same? On Thu, Apr 26, 2001 at 10:07:07AM -0600, dan_mcmanus@co.blm.gov wrote:> I downloaded samba-latest.tar.gz from http://us1.samba.org/samba/ftp/ and > my anti-virus software said it was infected, but didn't clean it, so I > deleted it. I downloaded it onto a Windows NT machine. I don't know whether > it's my software freaking out or an actual problem with the file, but I > thought I should let you know. > > Thanks, > Dan McManus > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba-- William Colburn, "Sysprog" <wcolburn@nmt.edu> Computer Center, New Mexico Institute of Mining and Technology http://www.nmt.edu/tcc/ http://www.nmt.edu/~wcolburn
FAQ: My Anti-Virus software detected a virus in samba-latest.tar.gz. Whats with that? Answer: This is a false warning. It is completely impossible for a virus to INFECT a archive (like .tar.gz) because a virus infects EXECUTABLE CODE, which an archive is not. And even if there was a virus contained in one of the files in the archive, in its compressed form it would not be recognised. The virus warning is from software that performs 'Heuristic' scans (i.e. reads the file byte by byte looking for virus-like instructions) where the software thinks that the .gz is executable, and if it was executable, then a particular byte-sequence in the file would resemble a possible virus. Analysis: The file is safe, not infected, cannot be infected, and your software is giving you a false warning. File is as safe as any uncompiled program can be considered. ----- Original Message ----- From: <dan_mcmanus@co.blm.gov> To: <samba@samba.org> Sent: Thursday, April 26, 2001 10:07 AM Subject: A possible virus> Hello, > > I downloaded samba-latest.tar.gz from http://us1.samba.org/samba/ftp/ and > my anti-virus software said it was infected, but didn't clean it, so I > deleted it. I downloaded it onto a Windows NT machine. I don't knowwhether> it's my software freaking out or an actual problem with the file, but I > thought I should let you know. > > Thanks, > Dan McManus > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >
On Thu, Apr 26, 2001 at 09:39:31AM -0700, Gerald Carter wrote:> Maybe we should post MD5 checksums for the tarballs.I think the more typical thing nowadays is to list md5 signatures on the download page, and to have a PGP signature alongside the tarballs for verification at the user end for the ultra paranoid. -- William Colburn, "Sysprog" <wcolburn@nmt.edu> Computer Center, New Mexico Institute of Mining and Technology http://www.nmt.edu/tcc/ http://www.nmt.edu/~wcolburn
hi all, i had the same error! it is no virus, but a bug in mcafee antivirus: it tries to unzip and check all files in the tarball, but the archive is big and so the mcafee gets a timeout! you can solve the problem by setting up the timeout for mcafee in the registry: search for HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\OnAccess Scanner\McShield\Configuration] and change this entry ScanArchiveTimeout"=dword:00000005(5) to ScanArchiveTimeout"=dword:00000040(64) this will help! andy/ORDIX AG dan_mcmanus@co.blm.gov wrote:> > Hello, > > I downloaded samba-latest.tar.gz from http://us1.samba.org/samba/ftp/ and > my anti-virus software said it was infected, but didn't clean it, so I > deleted it. I downloaded it onto a Windows NT machine. I don't know whether > it's my software freaking out or an actual problem with the file, but I > thought I should let you know.
Gerald Carter writes:> > This is extremely off-topic, but I wanted to point out that I used to > > believe things like this. Then I saw not one, but *two* different ways > > to make viewable jpeg images that contained worms. One propogated > > through IE, the other through netscape. Stay alert, trust no one. > > Yeah, but the netscape bug had to do with the javascript interpreter. > Maybe we should post MD5 checksums for the tarballs.Or gpg sign releases. Tim.