Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 03 Mar 2016 09:04:12 +0000
From: "Adam D. Barratt" <adam@...m-barratt.org.uk>
To: oss-security@...ts.openwall.com
Cc: cypherpunks@...nks.org, debian-legal@...ts.debian.org,
 listmaster@...ts.debian.org
Subject: Re: According to www.virustotal.com,
 lists.debian.org are hosting attachment .DOC virus

[full quote for listmaster@]

If you want an answer from those who deal with lists, you have to ask 
them. debian-legal@ is just another mailing list.

On 2016-03-03 8:44, Georgi Guninski wrote:
> According to www.virustotal.com, lists.debian.org
> are hosting attachment .DOC virus.
> 
> Would someone confirm or deny this?
> 
> Warning:  DO NOT OPEN THE .DOC!
> Discalimer: Nothing personal against Debian
> 
> https://lists.debian.org/debian-consultants/2016/01/msg00000.html
> links to:
> 
> https://lists.debian.org/debian-consultants/2016/01/docyrW4BlUhzH.doc
> 
> Submitting the last .doc URL at:
> https://www.virustotal.com
> and then going to:
> Go to downloaded file analysis
> gives:
> https://www.virustotal.com/en/file/c7210dc26e00a0d9f9bf8fb3b4850d52b62bb5836a7fa34bb669fc1b1553005e/analysis/1456991242/
> 
> SHA256: 
> 	c7210dc26e00a0d9f9bf8fb3b4850d52b62bb5836a7fa34bb669fc1b1553005e
> File name: 	docyrW4BlUhzH.doc
> Detection ratio: 	17 / 54
> 
> the first few results are:
> AVG 	W97M/Downloader 	20160303
> AVware 	Trojan-Downloader.O97M.Adnel.n (v) 	20160303
> AegisLab 	W97M.Gen!c 	20160303
> Arcabit 	HEUR.VBA.Trojan.e 	20160303
> Avast 	VBA:Downloader-ABC [Trj] 	20160303
> ESET-NOD32 	VBA/TrojanDownloader.Agent.AOM 	20160303
> 
> and some report it as clean.
> 
> The .doc is downloadable with the same checksum.

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ