Page MenuHome GnuPG
Create Task
Maniphest T525

Trojan in Windows Install Version?
Closed, ResolvedPublic
Actions

Description

Release: 1.4.2

Environment

Windows XP SP2, Bitdefender

Description

Bitdefender 8 tells me, that the Windows installer version "gnupg-w32cli-1.4.2.exe" is infected with "Backdor.Win32.Bifrose.D":

Here is an exerpt of the report:

C:\Daten\Mathias Habel\Eigene Dateien\Eigene Downloads\Internet\gnupg-w32cli-1.4.2.exe OK
C:\Daten\Mathias Habel\Eigene Dateien\Eigene Downloads\Internet\gnupg-w32cli-1.4.2.exe=>(NSIS o) OK
C:\Daten\Mathias Habel\Eigene Dateien\Eigene Downloads\Internet\gnupg-w32cli-1.4.2.exe=>(NSIS o)=>%INSTALLSCRIPT% OK
[....]
C:\Daten\Mathias Habel\Eigene Dateien\Eigene Downloads\Internet\gnupg-w32cli-1.4.2.exe=>(NSIS o)=>lzma_nsis0009 Infiziert mit: Backdoor.Win32.Bifrose.D
[...]

Maybe a false alarm?

How To Repeat

Please email me.

Fix

Unknown

Event Timeline

habel added projects: gnupg, Bug Report.Aug 19 2005, 11:30 PM
• werner closed this task as Resolved.Aug 4 2006, 9:46 PM
• werner added a subscriber: • werner.

Whatever Bitdefender is. There is no malware in GnuPG.

We are fighting using primes and not with faked horses. However is is possible
that the Turkey translation has not been properly protected against the Greek
one. Translators need to check ;-)

• werner reopened this task as Open.Aug 4 2006, 9:55 PM

A more serious note:

Please check that the sha1sum given in the announcement of the software matches.
This is a clear indication of an unmodified copy.

• werner closed this task as Resolved.Aug 4 2006, 9:55 PM