ATTN: Flutter team, OBJECT: flutter plugin > dart sdk

[Bened]

I do not want to create any panic, but I prefer to mention that a file named dartaotruntime.exe that you may find in the dart-sdk of flutter cache:

flutter\bin\cache\dart-sdk\bin

is suspected to be a Trojan:Win32/Zpevdo.B

[Benedicte Roussel]

--
You received this message because you are subscribed to the Google Groups "Flutter Development (flutter-dev)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to flutter-dev...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/flutter-dev/3d4023b9-d237-4311-8eaa-b767960e2bf9n%40googlegroups.com.

[Steven Harris]

Is this file not supposed to be there? Should I remove it?

[Benedicte Roussel]

Hello Steven, if you are on PC do not worry, Windows Defender will isolate the trojan.

I still have this file for the moment but the 'trojan is in quarantine'

Now it is up to Flutter team to answer your pertinent question: 

Is this file supposed to be there? What can they  do?

You received this message because you are subscribed to a topic in the Google Groups "Flutter Development (flutter-dev)" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/flutter-dev/2MZxdjWhmSE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to flutter-dev...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/flutter-dev/c47d4da7-8ced-432a-bed4-8e0b8febfdb5n%40googlegroups.com.

[wa...@clinicianfirst.com]

I have that file in my beta channel sdk, didn't look at any other channels.  It's date and time is exactly the same as the the other files along side it in bin.  I scanned it with defender and malwarebytes,   Neither reports any problem with the file.

Perhaps you have an active infection that's infecting other files on your system, including that file?  The file as bundled with the sdk seems completely benign to me.

[Benedicte Roussel]

I hope that I have no 'active infections' . I just report what Windows Defender said to me: 'he' put a trojan in quarantine, this trojan was coming from this file. May be the trojan is only 'detectable' or in action  while you create the app as it is an exe file.... I do not know but the thread is severe.

Today I made a deep scan... nothing....

Now it seems to be a new fashion to put 'bad file' in cache. May be 'bad file' are less visible in cache... 🤔

Cross plateform project has got foes... Flutter will survive!

I would prefer to tell you, 'oh yes it is my PC which is infected' ... but unfortunately Flutter/Dart seems to be the first target then come along of course its community and users.😥

To view this discussion on the web visit https://groups.google.com/d/msgid/flutter-dev/985d56bf-d576-4ac9-b368-36f3d7898efdn%40googlegroups.com.