[issue10500] Palevo.DZ worm msix86 installer 3.x installer
New submission from Vil : scan on msi installer x86 win 3.x python gives Win32/Palevo.DZ worm and erases. -- messages: 122101 nosy: VilIgnoble priority: normal severity: normal status: open title: Palevo.DZ worm msix86 installer 3.x installer type: security versions: Python 3.1, Python 3.2, Python 3.3 ___ Python tracker <http://bugs.python.org/issue10500> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue10500] Palevo.DZ worm msix86 installer 3.x installer
Vil added the comment: http://www.python.org/ftp/python/3.1.2/python-3.1.2.msi it was this link on download page for msi windows x86 installer On Tue, Nov 23, 2010 at 6:03 AM, Martin v. Löwis wrote: > > Martin v. Löwis added the comment: > > What file specifically did you download? > > -- > > ___ > Python tracker > <http://bugs.python.org/issue10500> > ___ > -- Added file: http://bugs.python.org/file19844/unnamed ___ Python tracker <http://bugs.python.org/issue10500> ___http://www.python.org/ftp/python/3.1.2/python-3.1.2.msi";>http://www.python.org/ftp/python/3.1.2/python-3.1.2.msiit was this link on download page for msi windows x86 installer On Tue, Nov 23, 2010 at 6:03 AM, Martin v. Löwis <mailto:[email protected]";>[email protected]> wrote: Martin v. Löwis <mailto:[email protected]";>[email protected]> added the comment: What file specifically did you download? -- ___ Python tracker <mailto:[email protected]";>[email protected]> <http://bugs.python.org/issue10500"; target="_blank">http://bugs.python.org/issue10500> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue10500] Palevo.DZ worm msix86 installer 3.x installer
Vil added the comment: I am using CA antivirus, I downloaded 3.13 in link http://www.python.org/ftp/python/3.1.3/python-3.1.3.msi and it is still showing Win32/Palevo.DZ when i scan and it quarantines and then erases the installer msix86 binary (does not include source) On Sun, Nov 28, 2010 at 2:56 AM, Ezio Melotti wrote: > > Ezio Melotti added the comment: > > I checked both the 3.1.2 and 3.1.3 x86 msi installers on windows xp machine > using Avast and it didn't find anything. > > -- > nosy: +ezio.melotti > > ___ > Python tracker > <http://bugs.python.org/issue10500> > ___ > -- Added file: http://bugs.python.org/file19864/unnamed ___ Python tracker <http://bugs.python.org/issue10500> ___I am using CA antivirus, I downloaded 3.13 in link http://www.python.org/ftp/python/3.1.3/python-3.1.3.msi";>http://www.python.org/ftp/python/3.1.3/python-3.1.3.msiand it is still showing Win32/Palevo.DZ when i scan and it quarantines and then erases the installer msix86 binary (does not include source) On Sun, Nov 28, 2010 at 2:56 AM, Ezio Melotti <mailto:[email protected]";>[email protected]> wrote: Ezio Melotti <mailto:[email protected]";>[email protected]> added the comment: I checked both the 3.1.2 and 3.1.3 x86 msi installers on windows xp machine using Avast and it didn't find anything. -- nosy: +ezio.melotti ___ Python tracker <mailto:[email protected]";>[email protected]> <http://bugs.python.org/issue10500"; target="_blank">http://bugs.python.org/issue10500> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue10500] Palevo.DZ worm msix86 installer 3.x installer
Vil added the comment: I sent the file I downloaded to total virus and it say, Result: 0/ 36 (0.0%) I'm not sure what that means, but I am guessing a Result of "-" means it did not find a virus, I have 2.7.1 installed and it scanned the installer and was clean, so though I do not know what the Result says I am going to say it shows clean on my side in the folder I downloaded to; I will send it in to CA to see if they can recognize it as a false positive. 2010/11/28 Jesús Cea Avión > > Jesús Cea Avión added the comment: > > The virustotal (Note: I am associated to those guys) link I posted included > HASHES you can verify in your side to know if it is a false positive or the > file is actually altered by "something" in transit/in your site. > > -- > > ___ > Python tracker > <http://bugs.python.org/issue10500> > ___ > -- Added file: http://bugs.python.org/file19876/unnamed ___ Python tracker <http://bugs.python.org/issue10500> ___I sent the file I downloaded to total virus and it say, Result: 0/ 36 (0.0%)I'm not sure what that means, but I am guessing a Result of "-" means it did not find a virus, I have 2.7.1 installed and it scanned the installer and was clean, so though I do not know what the Result says I am going to say it shows clean on my side in the folder I downloaded to; I will send it in to CA to see if they can recognize it as a false positive. 2010/11/28 Jesús Cea Avión <mailto:[email protected]";>[email protected]> Jesús Cea Avión <mailto:[email protected]";>[email protected]> added the comment: The virustotal (Note: I am associated to those guys) link I posted included HASHES you can verify in your side to know if it is a false positive or the file is actually altered by "something" in transit/in your site. -- ___ Python tracker <mailto:[email protected]";>[email protected]> <http://bugs.python.org/issue10500"; target="_blank">http://bugs.python.org/issue10500> ___ ___ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
