potential security problem, virus found.

[ccchan234]

no joke, virus found!

from the version 0.9.0, windows.

i did submit that to virustotal before i run,
but virustotal report nothing.

not sure if a new update in windows caught it.

[ccchan234]

ps: i sent the install.exe to virustotal, yet it's the buzz.exe that windows caught.

[ashepp]

I'm also seeing this and was about to report. Is this a real issue or a false positive?

[ccchan234]

I'm also seeing this and was about to report. Is this a real issue or a false positive?

i wish i can upload the buzz.exe to virustotal for better analysis.
however, my windows didn't allow me to touch the file anymore.

even i am on a chromebook, the installer is a .exe and i cant decompress it.

would be nice if someone could decompress the installer/install in sandboxie and send to virustotal for 50 scanners. thx

[chidiwilliams]

I believe this is a false positive from the installer not being code-signed. I'll leave this issue open for a few more days in case you find anything else, but I'll sign the 0.9.0 installer and give updates on #700.

[ccchan234]

hi, today i just extracted the buzz.exe and submitted to virustotal again (last time i submitted the install.exe),

it doesn't look good...

thank you.

however, one could use buzz inside vm/sandbox instead.

[ashepp]

This morning I had an ~$8K paypal transactions fraudulently charged to my account. I have no idea if it's related to the virus that was identified in the executable but I'm flagging so that this is investigated properly. It's unclear from this thread whether there's an issue or not.

[chidiwilliams]

This morning I had an ~$8K paypal transactions fraudulently charged to my account. I have no idea if it's related to the virus that was identified in the executable but I'm flagging so that this is investigated properly. It's unclear from this thread whether there's an issue or not.

Oh, no. I'm sorry to hear that. I took down the 0.9.0 exe file from the Releases page yesterday just to be safe. I haven't found anything substantial yet but I'll continue to investigate. Please let me know if there's anything else I can do to help.

[chidiwilliams]

Created at discussion at #702

[ccchan234]

This morning I had an ~$8K paypal transactions fraudulently charged to my account. I have no idea if it's related to the virus that was identified in the executable but I'm flagging so that this is investigated properly. It's unclear from this thread whether there's an issue or not.

are you sure?

would be nice if i could get a screen shot /w the private info cropped out.

thanks

[chidiwilliams]

The 0.9.0 signed exe has been updated on the Releases page. Pls let me know if you see the Windows warning again. Will close this issue for now since there was no follow-up from @ashepp.