From unknown Fri Jun 20 07:17:22 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#12284 <12284@debbugs.gnu.org> To: bug#12284 <12284@debbugs.gnu.org> Subject: Status: Trojan in Emacs 24.1 Windows emacsclient.exe? Reply-To: bug#12284 <12284@debbugs.gnu.org> Date: Fri, 20 Jun 2025 14:17:22 +0000 retitle 12284 Trojan in Emacs 24.1 Windows emacsclient.exe? reassign 12284 emacs submitter 12284 "Tony Graham" severity 12284 normal tag 12284 notabug thanks From debbugs-submit-bounces@debbugs.gnu.org Sun Aug 26 15:03:29 2012 Received: (at submit) by debbugs.gnu.org; 26 Aug 2012 19:03:29 +0000 Received: from localhost ([127.0.0.1]:51089 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1T5i7N-0005lS-58 for submit@debbugs.gnu.org; Sun, 26 Aug 2012 15:03:29 -0400 Received: from eggs.gnu.org ([208.118.235.92]:47094) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1T5ZTy-0005o2-3B for submit@debbugs.gnu.org; Sun, 26 Aug 2012 05:50:14 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1T5ZTB-0004EZ-LY for submit@debbugs.gnu.org; Sun, 26 Aug 2012 05:49:27 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-6.9 required=5.0 tests=BAYES_00,FSL_RCVD_USER, RCVD_IN_DNSWL_HI autolearn=unavailable version=3.3.2 Received: from lists.gnu.org ([208.118.235.17]:55689) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1T5ZTB-0004EU-FS for submit@debbugs.gnu.org; Sun, 26 Aug 2012 05:49:25 -0400 Received: from eggs.gnu.org ([208.118.235.92]:44038) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1T5ZT9-0006fj-MH for bug-gnu-emacs@gnu.org; Sun, 26 Aug 2012 05:49:25 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1T5ZT8-0004E3-PK for bug-gnu-emacs@gnu.org; Sun, 26 Aug 2012 05:49:23 -0400 Received: from mail3.webfaction.com ([70.85.44.146]:43936) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1T5ZT8-0004Dl-JZ for bug-gnu-emacs@gnu.org; Sun, 26 Aug 2012 05:49:22 -0400 Received: from mail3.webfaction.com (localhost.localdomain [127.0.0.1]) by mail3.webfaction.com (8.13.1/8.13.3) with ESMTP id q7Q9nI3T021843 for ; Sun, 26 Aug 2012 04:49:18 -0500 Received: (from apache@localhost) by mail3.webfaction.com (8.13.1/8.13.1/Submit) id q7Q9nGlv021832; Sun, 26 Aug 2012 10:49:16 +0100 X-Authentication-Warning: mail3.webfaction.com: apache set sender to dev.emacs@mentea.net using -f Received: from 83.147.131.233 (SquirrelMail authenticated user tkg_consulting) by mail3.webfaction.com with HTTP; Sun, 26 Aug 2012 10:49:16 +0100 (IST) Message-ID: <14002.83.147.131.233.1345974556.squirrel@mail3.webfaction.com> Date: Sun, 26 Aug 2012 10:49:16 +0100 (IST) Subject: Trojan in Emacs 24.1 Windows emacsclient.exe? From: "Tony Graham" To: bug-gnu-emacs@gnu.org User-Agent: SquirrelMail/1.4.8-18.el4.centos MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6, seldom 2.4 (older, 4) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 208.118.235.17 X-Spam-Score: -6.2 (------) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Sun, 26 Aug 2012 15:03:27 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.2 (------) I have had ZoneAlarm anti-virus on two computers (running the same version of ZoneAlarm) report the 'Trojan-Dropper.Win32.Dapato.bpkq' virus in the 'emacsclient.exe' from a emacs-24.1-bin-i386.zip freshly downloaded from ftp://ftp.gnu.org/gnu/emacs/windows/emacs-24.1-bin-i386.zip Regards, Tony Graham. From debbugs-submit-bounces@debbugs.gnu.org Sun Aug 26 23:03:25 2012 Received: (at 12284) by debbugs.gnu.org; 27 Aug 2012 03:03:25 +0000 Received: from localhost ([127.0.0.1]:51500 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1T5pbp-0000PK-IE for submit@debbugs.gnu.org; Sun, 26 Aug 2012 23:03:25 -0400 Received: from ironport2-out.teksavvy.com ([206.248.154.182]:57271) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1T5pbn-0000PD-WB for 12284@debbugs.gnu.org; Sun, 26 Aug 2012 23:03:24 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av0EAG6Zu0/O+KG6/2dsb2JhbABEtBGBCIIVAQEEAVYjBQsLDiYSFBgNEAETiBwFugmQRAOjM4FYgwU X-IronPort-AV: E=Sophos;i="4.75,637,1330923600"; d="scan'208";a="196766043" Received: from 206-248-161-186.dsl.teksavvy.com (HELO pastel.home) ([206.248.161.186]) by ironport2-out.teksavvy.com with ESMTP/TLS/ADH-AES256-SHA; 26 Aug 2012 23:02:32 -0400 Received: by pastel.home (Postfix, from userid 20848) id 21C0C59401; Sun, 26 Aug 2012 23:02:32 -0400 (EDT) From: Stefan Monnier To: "Tony Graham" Subject: Re: bug#12284: Trojan in Emacs 24.1 Windows emacsclient.exe? Message-ID: References: <14002.83.147.131.233.1345974556.squirrel@mail3.webfaction.com> Date: Sun, 26 Aug 2012 23:02:32 -0400 In-Reply-To: <14002.83.147.131.233.1345974556.squirrel@mail3.webfaction.com> (Tony Graham's message of "Sun, 26 Aug 2012 10:49:16 +0100 (IST)") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.2.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -1.9 (-) X-Debbugs-Envelope-To: 12284 Cc: 12284@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -1.9 (-) > I have had ZoneAlarm anti-virus on two computers (running the same version > of ZoneAlarm) Anti-virus are crap that waste everybody's time and resources. Do yourself a favor and throw it away. Stefan From debbugs-submit-bounces@debbugs.gnu.org Sun Aug 26 23:12:21 2012 Received: (at 12284) by debbugs.gnu.org; 27 Aug 2012 03:12:21 +0000 Received: from localhost ([127.0.0.1]:51509 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1T5pkS-0000bA-DC for submit@debbugs.gnu.org; Sun, 26 Aug 2012 23:12:21 -0400 Received: from mail-iy0-f172.google.com ([209.85.210.172]:43259) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1T5pkQ-0000b2-8E for 12284@debbugs.gnu.org; Sun, 26 Aug 2012 23:12:19 -0400 Received: by iabz21 with SMTP id z21so7753252iab.3 for <12284@debbugs.gnu.org>; Sun, 26 Aug 2012 20:11:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=NCRrWuG8cgphDbBm46AWEwknrmeBNeXgq1zGI6Sbj5Q=; b=EDu6SYHIDhtfqaeqrAMfQa3jEKgVbiOhPORLvPuQKXqGZbRr4d9hhGdJD4g25pux0z 8F/Y/OftbemQzib8gEuiTQ77FNsNOenOQMkjpzKAkCyrnpyK7lSq+FaBacMa0sItd5mo J2MDMLI2+IeLyE4PP02EZ/beuCpX9vTLoc1Ct2R63nA8KN5GnQkwI8PGc9Um3vbvLvre VpKSJMsfoStZFi4cNFwv9c8rsorsbFDWVVvLzg/2QvgBh/l25dTX8rACuV2U1eEkFUKM LF5a/b+k/3v6c7vWBTZFnND+UaoMIgggD1INUHQtms2A/U4tM6zdNyKZ6k7qI2nQJm4N xwSw== Received: by 10.50.213.97 with SMTP id nr1mr8821849igc.40.1346037087242; Sun, 26 Aug 2012 20:11:27 -0700 (PDT) Received: from [192.168.1.3] (75-166-156-251.hlrn.qwest.net. [75.166.156.251]) by mx.google.com with ESMTPS id gx1sm18395320igb.16.2012.08.26.20.11.24 (version=SSLv3 cipher=OTHER); Sun, 26 Aug 2012 20:11:26 -0700 (PDT) Message-ID: <503AE559.1060705@gmail.com> Date: Sun, 26 Aug 2012 21:11:21 -0600 From: Christoph Scholtes User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20120713 Thunderbird/14.0 MIME-Version: 1.0 To: Tony Graham Subject: Re: bug#12284: Trojan in Emacs 24.1 Windows emacsclient.exe? References: <14002.83.147.131.233.1345974556.squirrel@mail3.webfaction.com> In-Reply-To: <14002.83.147.131.233.1345974556.squirrel@mail3.webfaction.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 12284 Cc: 12284@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.3 (--) On 8/26/2012 3:49 AM, Tony Graham wrote: > I have had ZoneAlarm anti-virus on two computers (running the same version > of ZoneAlarm) report the 'Trojan-Dropper.Win32.Dapato.bpkq' virus in the > 'emacsclient.exe' from a emacs-24.1-bin-i386.zip freshly downloaded from > ftp://ftp.gnu.org/gnu/emacs/windows/emacs-24.1-bin-i386.zip We have had quite a few false positives in recent months. I would recommend reporting this to the ZoneAlarm folks. Christoph From debbugs-submit-bounces@debbugs.gnu.org Mon Aug 27 02:05:38 2012 Received: (at control) by debbugs.gnu.org; 27 Aug 2012 06:05:38 +0000 Received: from localhost ([127.0.0.1]:51631 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1T5sS8-0004Wt-6M for submit@debbugs.gnu.org; Mon, 27 Aug 2012 02:05:36 -0400 Received: from mail-pb0-f44.google.com ([209.85.160.44]:61602) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1T5sS5-0004Wm-PJ for control@debbugs.gnu.org; Mon, 27 Aug 2012 02:05:34 -0400 Received: by pbbrr4 with SMTP id rr4so6776493pbb.3 for ; Sun, 26 Aug 2012 23:04:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:from:to:subject:date:message-id:mime-version:content-type; bh=S8iMTjwwO8/D/iauaHVu3KRIVEnYKW1idoWwh06Q3W0=; b=PMXqUdi4gi22Biz5GLrTlQgn6SNWBMfLBKrpQ5Bn0rKIxdWJi5KCMrwGIB1dXn4yxg kX3QijT8clG42ofgKMfskt5tS/Id7QlOlxrDaU9QFBO41xILz0okxKuPmdy2ivbQ948R UQ7zacli2Hvu15NTzoWj5PF4KRjjBdzGYkYrls6tdAmHBOvG2WekngSw3Sq8kj2oD5jm rx0FocmsZPl1EmqwueXe5WVwXhwaLaRkJx2EFxzHHXCQsY0wMSnkRaVvFH2JayVGDXKB UW4dQf9NlNWevY/joLyYAJARKPXTeWHqLREGaf1X4K9+OQwYXrSlrpVPkJ5cPwdFkd5Y YIGA== Received: by 10.68.217.202 with SMTP id pa10mr32185166pbc.15.1346047482016; Sun, 26 Aug 2012 23:04:42 -0700 (PDT) Received: from ulysses ([155.69.16.255]) by mx.google.com with ESMTPS id kp3sm13984198pbc.64.2012.08.26.23.04.39 (version=SSLv3 cipher=OTHER); Sun, 26 Aug 2012 23:04:41 -0700 (PDT) From: Chong Yidong To: control@debbugs.gnu.org Subject: tags 12284 + notabug Date: Mon, 27 Aug 2012 14:04:36 +0800 Message-ID: <876284rhu3.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.6 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.6 (--) tags 12284 + notabug close 12284 thanks From unknown Fri Jun 20 07:17:22 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Mon, 24 Sep 2012 11:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator