From unknown Sat Jun 14 00:07:28 2025 X-Loop: help-debbugs@gnu.org Subject: bug#47912: questions about virus Resent-From: RM Original-Sender: "Debbugs-submit" Resent-CC: bug-gzip@gnu.org Resent-Date: Tue, 20 Apr 2021 17:40:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 47912 X-GNU-PR-Package: gzip X-GNU-PR-Keywords: To: 47912@debbugs.gnu.org X-Debbugs-Original-To: bug-gzip@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16189403536071 (code B ref -1); Tue, 20 Apr 2021 17:40:02 +0000 Received: (at submit) by debbugs.gnu.org; 20 Apr 2021 17:39:13 +0000 Received: from localhost ([127.0.0.1]:55886 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYuLB-0001Zq-8q for submit@debbugs.gnu.org; Tue, 20 Apr 2021 13:39:13 -0400 Received: from lists.gnu.org ([209.51.188.17]:50394) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYuKM-0001Xn-F4 for submit@debbugs.gnu.org; Tue, 20 Apr 2021 13:38:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:53088) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lYuKL-0000Wi-KC for bug-gzip@gnu.org; Tue, 20 Apr 2021 13:38:21 -0400 Received: from mail-ed1-x52a.google.com ([2a00:1450:4864:20::52a]:43650) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lYuKI-0005BU-85 for bug-gzip@gnu.org; Tue, 20 Apr 2021 13:38:20 -0400 Received: by mail-ed1-x52a.google.com with SMTP id e7so46001334edu.10 for ; Tue, 20 Apr 2021 10:38:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=OmDmPYB2DcliafS9xr4JiG/TjWaf8S91hJgrARW/B0o=; b=nMCemx+m8RXF2zk2aXExF/LZ88IsEvGFkK3chfmF0fxMXUrxGk8WFesoSeGK3K1NTo 3km9XhFBeLIsRrCTpL97JaJTjP4Qk6nI/6vLomNf0R1omhvz+4+bzxzjscsMy4chjppp d/+yquOOq/qGcrPt6H45qAdUa8H76RnU3e2ej7cuOGMl7b4CyOTuz4IRYP6zYFwCJa5T 0V4h4vHs6VgAo/9+LUv6xe5AA5ej6fRx8QoWDFcS9vXz2ojOnCLwZARss/+KWYxwJeRB WOYvU16AvTpJh+epu75KB2UZ1JaVON73hjsgkUb1O/edtZjzJVbkrupb8QuA+Hxw8rOg oSJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=OmDmPYB2DcliafS9xr4JiG/TjWaf8S91hJgrARW/B0o=; b=fRyz8Ok8odXVVRjt8PyowGvV8cDUOAXbsqsJlxPj2KfxW619vL3ctb0tAgqQVKAq9q xs4DO0rAFaieSYKOru1dB8QZVMcRzyBzn9z0aI/BguXd0GsySJYRTBtklSoBUHqM66YK /v1cfvF6+fLGt2f3+80Qpwiw2c287d2JDKc5ZCvc1dlJRiinqBtZERA8Hww05kiTeFj4 j6NhfDhd/gt66gLxCjfWx4+Lu6ca8eHDrVAuOqCdLr3F7Bt3SGgS+G51hY2rEejWGX7C CRFbLly4NclUMruv/zuWl8YYl9IeUJ5qMhp35GwYlMoaWcsrN/BSCq7yLmrhKE57IAfK NmDQ== X-Gm-Message-State: AOAM532Qlf3cQ1cvcnIVk7KMXI5uwxGy3UIaEEWQdEdgCovit1tWkPW/ i1P+TUpRcykvppIy01gW6rXlbZJQXFKgNhusuAyvWwlT+98xDg== X-Google-Smtp-Source: ABdhPJxibOiC2ZSpODk97pkNnbn6zK3DQEUWSbMWUxWPjMQxLvf8ZJTcGbjPBXuABzGzN3zv92hQhC0D41xeKBq+VtI= X-Received: by 2002:a05:6402:138f:: with SMTP id b15mr34197236edv.121.1618940295656; Tue, 20 Apr 2021 10:38:15 -0700 (PDT) MIME-Version: 1.0 From: RM Date: Tue, 20 Apr 2021 13:42:27 -0400 Message-ID: Content-Type: multipart/alternative; boundary="0000000000003c395705c06ae936" Received-SPF: pass client-ip=2a00:1450:4864:20::52a; envelope-from=agencelivre@gmail.com; helo=mail-ed1-x52a.google.com X-Spam_score_int: 6 X-Spam_score: 0.6 X-Spam_bar: / X-Spam_report: (0.6 / 5.0 requ) BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Mailman-Approved-At: Tue, 20 Apr 2021 13:39:12 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) --0000000000003c395705c06ae936 Content-Type: text/plain; charset="UTF-8" my antivirus scans continually show Gzip as containing TrojanDownloader:HTML/Elshutilo.Ayet i can't remove it because of something called trusted installer. the antivirus program "removes" the virus but at the next scan it is still/again there. please advise how to get rid of this. thank you dm --0000000000003c395705c06ae936 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
my antivirus scans continually show Gzip = as containing=C2=A0

TrojanDownloade= r:HTML/Elshutilo.A

yet i can't remove it because of something called trusted insta= ller. the antivirus program "removes" the virus but at the next s= can it is still/again there. please advise how to get rid of this. thank yo= u


dm


=


--0000000000003c395705c06ae936-- From unknown Sat Jun 14 00:07:28 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: RM Subject: bug#47912: closed (Re: bug#47912: questions about virus) Message-ID: References: X-Gnu-PR-Message: they-closed 47912 X-Gnu-PR-Package: gzip Reply-To: 47912@debbugs.gnu.org Date: Tue, 20 Apr 2021 18:16:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1618942562-17912-1" This is a multi-part message in MIME format... ------------=_1618942562-17912-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #47912: questions about virus which was filed against the gzip package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 47912@debbugs.gnu.org. --=20 47912: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D47912 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1618942562-17912-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 47912-done) by debbugs.gnu.org; 20 Apr 2021 18:15:03 +0000 Received: from localhost ([127.0.0.1]:55935 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYutr-0004dH-8o for submit@debbugs.gnu.org; Tue, 20 Apr 2021 14:15:03 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:34902) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYuto-0004cU-Uv for 47912-done@debbugs.gnu.org; Tue, 20 Apr 2021 14:15:01 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 8DCAC1600D1; Tue, 20 Apr 2021 11:14:54 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id M1sCRUyakQuh; Tue, 20 Apr 2021 11:14:53 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id DDD0D1600EA; Tue, 20 Apr 2021 11:14:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 4AnqY49TVNAw; Tue, 20 Apr 2021 11:14:53 -0700 (PDT) Received: from [192.168.1.9] (cpe-172-91-119-151.socal.res.rr.com [172.91.119.151]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id B930A1600D1; Tue, 20 Apr 2021 11:14:53 -0700 (PDT) Subject: Re: bug#47912: questions about virus To: RM References: From: Paul Eggert Organization: UCLA Computer Science Department Message-ID: Date: Tue, 20 Apr 2021 11:14:53 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.7.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 47912-done Cc: 47912-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) On 4/20/21 10:42 AM, RM wrote: > my antivirus scans continually show Gzip as containing > TrojanDownloader:HTML/Elshutilo.Ayet i can't remove it because of something > called trusted installer. the antivirus program "removes" the virus but at > the next scan it is still/again there. please advise how to get rid of > this. thank you I'm afraid you're writing to the wrong place; we merely maintain the upstream source code and do not generate the binary executable that your software is complaining about. I suggest writing to whoever generated the program you're actually running. Or pedrhaps you can write to whoever is maintaining your antivirus software. ------------=_1618942562-17912-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 20 Apr 2021 17:39:13 +0000 Received: from localhost ([127.0.0.1]:55886 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYuLB-0001Zq-8q for submit@debbugs.gnu.org; Tue, 20 Apr 2021 13:39:13 -0400 Received: from lists.gnu.org ([209.51.188.17]:50394) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYuKM-0001Xn-F4 for submit@debbugs.gnu.org; Tue, 20 Apr 2021 13:38:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:53088) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lYuKL-0000Wi-KC for bug-gzip@gnu.org; Tue, 20 Apr 2021 13:38:21 -0400 Received: from mail-ed1-x52a.google.com ([2a00:1450:4864:20::52a]:43650) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lYuKI-0005BU-85 for bug-gzip@gnu.org; Tue, 20 Apr 2021 13:38:20 -0400 Received: by mail-ed1-x52a.google.com with SMTP id e7so46001334edu.10 for ; Tue, 20 Apr 2021 10:38:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=OmDmPYB2DcliafS9xr4JiG/TjWaf8S91hJgrARW/B0o=; b=nMCemx+m8RXF2zk2aXExF/LZ88IsEvGFkK3chfmF0fxMXUrxGk8WFesoSeGK3K1NTo 3km9XhFBeLIsRrCTpL97JaJTjP4Qk6nI/6vLomNf0R1omhvz+4+bzxzjscsMy4chjppp d/+yquOOq/qGcrPt6H45qAdUa8H76RnU3e2ej7cuOGMl7b4CyOTuz4IRYP6zYFwCJa5T 0V4h4vHs6VgAo/9+LUv6xe5AA5ej6fRx8QoWDFcS9vXz2ojOnCLwZARss/+KWYxwJeRB WOYvU16AvTpJh+epu75KB2UZ1JaVON73hjsgkUb1O/edtZjzJVbkrupb8QuA+Hxw8rOg oSJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=OmDmPYB2DcliafS9xr4JiG/TjWaf8S91hJgrARW/B0o=; b=fRyz8Ok8odXVVRjt8PyowGvV8cDUOAXbsqsJlxPj2KfxW619vL3ctb0tAgqQVKAq9q xs4DO0rAFaieSYKOru1dB8QZVMcRzyBzn9z0aI/BguXd0GsySJYRTBtklSoBUHqM66YK /v1cfvF6+fLGt2f3+80Qpwiw2c287d2JDKc5ZCvc1dlJRiinqBtZERA8Hww05kiTeFj4 j6NhfDhd/gt66gLxCjfWx4+Lu6ca8eHDrVAuOqCdLr3F7Bt3SGgS+G51hY2rEejWGX7C CRFbLly4NclUMruv/zuWl8YYl9IeUJ5qMhp35GwYlMoaWcsrN/BSCq7yLmrhKE57IAfK NmDQ== X-Gm-Message-State: AOAM532Qlf3cQ1cvcnIVk7KMXI5uwxGy3UIaEEWQdEdgCovit1tWkPW/ i1P+TUpRcykvppIy01gW6rXlbZJQXFKgNhusuAyvWwlT+98xDg== X-Google-Smtp-Source: ABdhPJxibOiC2ZSpODk97pkNnbn6zK3DQEUWSbMWUxWPjMQxLvf8ZJTcGbjPBXuABzGzN3zv92hQhC0D41xeKBq+VtI= X-Received: by 2002:a05:6402:138f:: with SMTP id b15mr34197236edv.121.1618940295656; Tue, 20 Apr 2021 10:38:15 -0700 (PDT) MIME-Version: 1.0 From: RM Date: Tue, 20 Apr 2021 13:42:27 -0400 Message-ID: Subject: questions about virus To: bug-gzip@gnu.org Content-Type: multipart/alternative; boundary="0000000000003c395705c06ae936" Received-SPF: pass client-ip=2a00:1450:4864:20::52a; envelope-from=agencelivre@gmail.com; helo=mail-ed1-x52a.google.com X-Spam_score_int: 6 X-Spam_score: 0.6 X-Spam_bar: / X-Spam_report: (0.6 / 5.0 requ) BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Tue, 20 Apr 2021 13:39:12 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) --0000000000003c395705c06ae936 Content-Type: text/plain; charset="UTF-8" my antivirus scans continually show Gzip as containing TrojanDownloader:HTML/Elshutilo.Ayet i can't remove it because of something called trusted installer. the antivirus program "removes" the virus but at the next scan it is still/again there. please advise how to get rid of this. thank you dm --0000000000003c395705c06ae936 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
my antivirus scans continually show Gzip = as containing=C2=A0

TrojanDownloade= r:HTML/Elshutilo.A

yet i can't remove it because of something called trusted insta= ller. the antivirus program "removes" the virus but at the next s= can it is still/again there. please advise how to get rid of this. thank yo= u


dm


=


--0000000000003c395705c06ae936-- ------------=_1618942562-17912-1--