Don't know why this occurred or even if it is accurate, but I just thought I'd let you all know
about it since the Gimp contacts forum\lists uses an invalid (and insecure) validation technique.
So, when I tried to let them know about this problem, I could not because of security reasons.
The following is what I found after I updated my version of the Gimp to the very latest release:
Threat Files
<Trojan.Downloader.Agent.bjo> : C:\Program Files\Gimp-2.0\lib\gimp\2.0\plug-ins\iwarp.exe
Just FYI...
Thanks, Brain-Dead
EDIT:
This problem was discovered after I installed the Gimp, Version 2.62.
Gimp Problems
-
Topic authorBobHegwood
- Posts: 1803
- Joined: 12.10.2007
- With us: 17 years 1 month
Gimp Problems
Brain-Dead Geezer Bob is now using...
Windows Vista Home Premium, 64-bit on a
Gateway Pentium Dual-Core CPU E5200, 2.5GHz
7 GB RAM, 500 GB hard disk, Nvidia GeForce 7100
Nvidia nForce 630i, 1680x1050 screen, Latest SVN
Windows Vista Home Premium, 64-bit on a
Gateway Pentium Dual-Core CPU E5200, 2.5GHz
7 GB RAM, 500 GB hard disk, Nvidia GeForce 7100
Nvidia nForce 630i, 1680x1050 screen, Latest SVN
- LordFerret
- Posts: 737
- Joined: 24.08.2006
- Age: 68
- With us: 18 years 2 months
- Location: NJ USA
Re: Gimp Problems
I saw some news of this also, Bob, and it appears to be an old alert (2007). I found plenty of discussion about it in various forums, but unfortunately they're all in languages I don't know. See below -
http://www.gimp.com.br/joomla/smf/index.php?topic=7790.0
http://www.gimp-attitude.org/forum/viewtopic.php?p=33293&sid=320d168b1306d47069d98c55c910c9a0
http://forum.dobreprogramy.pl/viewtopic.php?f=16&p=1894134
Perhaps some of the folks here can help with translation?
The only discussion I found in english left me with doubt - is it /or\ is it not a false positive -
http://forum.spywareterminator.com/Default.aspx?g=posts&t=5547
According to these folks, an authority I tend to trust, it's legit -
http://www.ca.com/us/securityadvisor/pest/pest.aspx?id=453111703
Only Windows users are at risk. (I'm running Debian Linux these days now! )
http://www.gimp.com.br/joomla/smf/index.php?topic=7790.0
http://www.gimp-attitude.org/forum/viewtopic.php?p=33293&sid=320d168b1306d47069d98c55c910c9a0
http://forum.dobreprogramy.pl/viewtopic.php?f=16&p=1894134
Perhaps some of the folks here can help with translation?
The only discussion I found in english left me with doubt - is it /or\ is it not a false positive -
http://forum.spywareterminator.com/Default.aspx?g=posts&t=5547
According to these folks, an authority I tend to trust, it's legit -
http://www.ca.com/us/securityadvisor/pest/pest.aspx?id=453111703
Only Windows users are at risk. (I'm running Debian Linux these days now! )
-
Topic authorBobHegwood
- Posts: 1803
- Joined: 12.10.2007
- With us: 17 years 1 month
Re: Gimp Problems
LordFerret wrote:Only Windows users are at risk. (I'm running Debian Linux these days now! )
No problem for me...
Threat (perceived or real) was removed by my anti-virus software.
Thanks, Bob
Brain-Dead Geezer Bob is now using...
Windows Vista Home Premium, 64-bit on a
Gateway Pentium Dual-Core CPU E5200, 2.5GHz
7 GB RAM, 500 GB hard disk, Nvidia GeForce 7100
Nvidia nForce 630i, 1680x1050 screen, Latest SVN
Windows Vista Home Premium, 64-bit on a
Gateway Pentium Dual-Core CPU E5200, 2.5GHz
7 GB RAM, 500 GB hard disk, Nvidia GeForce 7100
Nvidia nForce 630i, 1680x1050 screen, Latest SVN
Re: Gimp Problems
Hello
From a French forum it seems that it is a false positive and that several anti-viruses have fixed that in new updates.
http://www.liberkey.com/en/forum/problemes-bogues-rencontres/5356-sujet-sujet-unique-fausses-detections-de-virus-liberkey-4.0/page-12.html
But it is just a forum discussion. I have not verified that it is true or not.
I found also that link
http://www.prevx.com/filenames/1717314972235287434-0/IWARP.EXE.html
But it is written in a strange language that I don’t understand very well.
And from that forum
http://thegimp2.2.forumcommunity.net/?t=21440697
It appears that the threat is your anti-virus!
I guess that it has removed the IWarp from your list of filters in the GIMP! No?
A+
From a French forum it seems that it is a false positive and that several anti-viruses have fixed that in new updates.
http://www.liberkey.com/en/forum/problemes-bogues-rencontres/5356-sujet-sujet-unique-fausses-detections-de-virus-liberkey-4.0/page-12.html
But it is just a forum discussion. I have not verified that it is true or not.
I found also that link
http://www.prevx.com/filenames/1717314972235287434-0/IWARP.EXE.html
But it is written in a strange language that I don’t understand very well.
And from that forum
http://thegimp2.2.forumcommunity.net/?t=21440697
It appears that the threat is your anti-virus!
I guess that it has removed the IWarp from your list of filters in the GIMP! No?
A+