Opened 7 years ago
Closed 7 years ago
#54701 closed defect (invalid)
hexchat has IRC.Virus
| Reported by: | ohhmm (Sergei Krivonos) | Owned by: | raimue (Rainer Müller) |
|---|---|---|---|
| Priority: | Normal | Milestone: | |
| Component: | ports | Version: | |
| Keywords: | Cc: | ||
| Port: |
Description
Dr Web detected that hexchat-2.12.3.tar.xz has this kind of virus.
Attachments (1)
Change History (4)
Changed 7 years ago by ohhmm (Sergei Krivonos)
| Attachment: | Снимок экрана 2017-08-30 в 23.44.48.png added |
|---|
comment:1 Changed 7 years ago by neverpanic (Clemens Lang)
| Owner: | set to raimue |
|---|---|
| Status: | new → assigned |
comment:2 Changed 7 years ago by ohhmm (Sergei Krivonos)
it is deleted, sorry. You may try running DrWeb if you fell such need..
comment:3 Changed 7 years ago by raimue (Rainer Müller)
| Resolution: | → invalid |
|---|---|
| Status: | assigned → closed |
IRC is often used for command and control servers, therefore antivirus software may report it. I would also assume this is a false positive by Dr.Web somehow triggered by HexChat. The other option would be that your download was tampered with, although that seems unlikely as MacPorts should have recognized a checksum mismatch.
Note: See
TracTickets for help on using
tickets.
https://virustotal.com/#/url/5728f1a7ac702c2c4428e991778996456c24241fc7dfb57c53672fad1d199ed0/detection
Doesn't seem like that's a problem with the distfile MacPorts expects (i.e. sha256 6f2b22372c7a9ed8ffab817079638e8f4178f5f8ba63c89cb3baa01be614f2ba). Maybe your distfile was corrupted (try
sudo port clean --dist hexchatand try again).Dr.Web as used by virustotal does not seem to recognize this archive as virus, and neither do any of the other scanners.
On the other hand, "IRC.Virus" sounds like a generic IRC client detection mechanism. It sounds like a false positive that an IRC client would trigger this. Contact your anti-virus vendor and advise them that this is likely a false positive.