Wpkg-GP-0.17_*.exe detected as viruses / impossible to download from googlecode

[le dahut]

Hi,

Just to tell that it is impossible to download stable version of Wpkg-GP
at this time.

Google claims that both files (x64 & x86) are infected by viruses and
that only the project owner can download such files.


Another thing is that it is impossible to give direct download links to
google code content anymore.
For example, it is impossible to script Wpkg-GP's download, I can't tell
my Samba servers :
wget http://blablabla.bli/Wpkg-GP-0.17_x64.exe

I've seen that it is possible to host .exe in repository and thus give a
direct URL download link.

Hope this helps.


Regards.
Klaas

[Jáder Marasca]

I've got same error message from GoogleDrive  when try to download BETA 18 to test translated strings!

Jáder

Jáder Marasca

skype: jader.marasca
+55.51.9246.3265 (Claro)              +55.51.4063.7407 (Vono)

+55.83.3031.7795 (GVT)               +55.83.9811.9170 (Tim)          

+1.305.791.3265 (GoogleVoice)     +1.608.315.2337 (GoogleVoice) 

http://www.linuxfacil.net

--
You received this message because you are subscribed to the Google Groups "wpkg-gp" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wpkg-gp+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Marco Gaiarin]

Mandi! Jáder Marasca
In chel di` si favelave...

> I've got same error message from GoogleDrive  when try to download BETA 18 to
> test translated strings!

I can confirm, also ClamAV identify the installer as infected by
'Win.Adware.Sendori' virus:

dixie:~# clamscan --verbose /srv/software/Shareware/Utility/WPKG/Wpkg-GP-0.17_x64.exe /srv/software/Shareware/Utility/WPKG/Wpkg-GP-0.17_x86.exe
Scanning /srv/software/Shareware/Utility/WPKG/Wpkg-GP-0.17_x64.exe
/srv/software/Shareware/Utility/WPKG/Wpkg-GP-0.17_x64.exe: Win.Adware.Sendori FOUND
Scanning /srv/software/Shareware/Utility/WPKG/Wpkg-GP-0.17_x86.exe
/srv/software/Shareware/Utility/WPKG/Wpkg-GP-0.17_x86.exe: Win.Adware.Sendori FOUND
----------- SCAN SUMMARY -----------
Known viruses: 3680829
Engine version: 0.98.1
Scanned directories: 0
Scanned files: 2
Infected files: 2
Data scanned: 100.79 MB
Data read: 21.16 MB (ratio 4.76:1)
Time: 26.004 sec (0 m 26 s)

--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.sv.lnf.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797

Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/25/index.php/component/k2/item/123
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

[Oliver Sauder]

This is certainly a false-positive.... really annoying. Nothing of the
behavior of Sendori as described here
<http://malwaretips.com/blogs/sendori-virus-removal/> happens when
WPKG-GP is installed.

Have to see what can be done what actually causes this alert and whether
it can be avoided at all. Not sure though when I will find time so if
anyone has some insight how to fix this - feedback is welcome.

[Marco Gaiarin]

Mandi! Oliver Sauder

In chel di` si favelave...

> Have to see what can be done what actually causes this alert and whether
> it can be avoided at all. Not sure though when I will find time so if
> anyone has some insight how to fix this - feedback is welcome.

At least for ClamAV, provided that the download .exe on your site was
not tampered with (and i'm totally confident about that, because ClamAV
report as infected files that i've downloaded from your site some month
ago, probably some days after you release 0.17...), you can upload as
false positive:

http://www.clamav.net/report/report-fp.html

[Manne Hoffmann]

Am Dienstag, 18. November 2014 08:53:29 UTC+1 schrieb Oliver Sauder:
> This is certainly a false-positive.... really annoying.

Hi there,
I just want to jump in to report, that all of the files currently offered here cannot be downloaded, because Google claims they are infected ...

> Not sure though when I will find time so if anyone has some insight how to fix this - feedback is welcome.

If you are really sure, that the files are clean, and that it's only GoogleDrive that "thinks" they are infected and thus preventing users from downloading the software ...
I'd be glad to offer FTP-Webspace to host them.

Let me know if you're interested.

So long,
Manfred.

[le dahut]

Le 18/11/2014 08:53, Oliver Sauder a écrit :
> Not sure though when I will find time so if
> anyone has some insight how to fix this - feedback is welcome.

You can put the .exe in the repository and then give a direct link to
them on the "download" page.

This way each .exe will have a durable direct download link that we
could use for automatic downloads, which is not the case with Google
Drive which uses dynamic links and prevents auto-downloads.
(automatic downloads happens when I add a <package>.xml on my servers
and tell them to download the corresponding installer on the editor
website, not possible with Wpkg-GP)

[Oliver Sauder]

I have committed setups of version 0.17 and beta version 0.18b1 to
<http://wpkg-gp.googlecode.com/svn/downloads/>

Also submitted setups to clamav as false-positive waiting for feedback.

Cheers,
Oliver

[Stefan Pendl]

This doesn't work for users without a SVN client, so it is not much help
for them :'(


--
Stefan P.

Top-posting:
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

[Oliver Sauder]

On 22.11.2014 21:13, Stefan Pendl wrote:
> Am 22.11.2014 um 17:47 schrieb Oliver Sauder:
>> I have committed setups of version 0.17 and beta version 0.18b1 to
>> <http://wpkg-gp.googlecode.com/svn/downloads/>
>>
>> Also submitted setups to clamav as false-positive waiting for feedback.
>>
>> Cheers,
>> Oliver
>>
>
> This doesn't work for users without a SVN client, so it is not much help
> for them :'(

Just open it in a web browser and you can download the files. No
Subversion needed.

[Oliver Sauder]

Oops... should have checked this first.... googlecode doesn't allow downloads of bin files from svn through http.... what a head ache.

[Oliver Sauder]

It seems clamav has already fixed the issue of the false-positive... and also Google Drive doesn't mark the downloads as virus anymore (maybe it uses clamav?).

So back to square one and you can download the files from https://drive.google.com/folderview?id=0B9Eadi-crzpOVEtTM01aYm5YNm8&usp=sharing as before

[Stefan Pendl]

--

You received this message because you are subscribed to the Google Groups "wpkg-gp" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wpkg-gp+u...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

I can confirm that the download from Google Drive works now ;)

Thanks :)