From unknown Sat Jun 14 14:24:25 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#47912 <47912@debbugs.gnu.org> To: bug#47912 <47912@debbugs.gnu.org> Subject: Status: questions about virus Reply-To: bug#47912 <47912@debbugs.gnu.org> Date: Sat, 14 Jun 2025 21:24:25 +0000 retitle 47912 questions about virus reassign 47912 gzip submitter 47912 RM severity 47912 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 20 13:39:13 2021 Received: (at submit) by debbugs.gnu.org; 20 Apr 2021 17:39:13 +0000 Received: from localhost ([127.0.0.1]:55886 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYuLB-0001Zq-8q for submit@debbugs.gnu.org; Tue, 20 Apr 2021 13:39:13 -0400 Received: from lists.gnu.org ([209.51.188.17]:50394) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYuKM-0001Xn-F4 for submit@debbugs.gnu.org; Tue, 20 Apr 2021 13:38:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:53088) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lYuKL-0000Wi-KC for bug-gzip@gnu.org; Tue, 20 Apr 2021 13:38:21 -0400 Received: from mail-ed1-x52a.google.com ([2a00:1450:4864:20::52a]:43650) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lYuKI-0005BU-85 for bug-gzip@gnu.org; Tue, 20 Apr 2021 13:38:20 -0400 Received: by mail-ed1-x52a.google.com with SMTP id e7so46001334edu.10 for ; Tue, 20 Apr 2021 10:38:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=OmDmPYB2DcliafS9xr4JiG/TjWaf8S91hJgrARW/B0o=; b=nMCemx+m8RXF2zk2aXExF/LZ88IsEvGFkK3chfmF0fxMXUrxGk8WFesoSeGK3K1NTo 3km9XhFBeLIsRrCTpL97JaJTjP4Qk6nI/6vLomNf0R1omhvz+4+bzxzjscsMy4chjppp d/+yquOOq/qGcrPt6H45qAdUa8H76RnU3e2ej7cuOGMl7b4CyOTuz4IRYP6zYFwCJa5T 0V4h4vHs6VgAo/9+LUv6xe5AA5ej6fRx8QoWDFcS9vXz2ojOnCLwZARss/+KWYxwJeRB WOYvU16AvTpJh+epu75KB2UZ1JaVON73hjsgkUb1O/edtZjzJVbkrupb8QuA+Hxw8rOg oSJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=OmDmPYB2DcliafS9xr4JiG/TjWaf8S91hJgrARW/B0o=; b=fRyz8Ok8odXVVRjt8PyowGvV8cDUOAXbsqsJlxPj2KfxW619vL3ctb0tAgqQVKAq9q xs4DO0rAFaieSYKOru1dB8QZVMcRzyBzn9z0aI/BguXd0GsySJYRTBtklSoBUHqM66YK /v1cfvF6+fLGt2f3+80Qpwiw2c287d2JDKc5ZCvc1dlJRiinqBtZERA8Hww05kiTeFj4 j6NhfDhd/gt66gLxCjfWx4+Lu6ca8eHDrVAuOqCdLr3F7Bt3SGgS+G51hY2rEejWGX7C CRFbLly4NclUMruv/zuWl8YYl9IeUJ5qMhp35GwYlMoaWcsrN/BSCq7yLmrhKE57IAfK NmDQ== X-Gm-Message-State: AOAM532Qlf3cQ1cvcnIVk7KMXI5uwxGy3UIaEEWQdEdgCovit1tWkPW/ i1P+TUpRcykvppIy01gW6rXlbZJQXFKgNhusuAyvWwlT+98xDg== X-Google-Smtp-Source: ABdhPJxibOiC2ZSpODk97pkNnbn6zK3DQEUWSbMWUxWPjMQxLvf8ZJTcGbjPBXuABzGzN3zv92hQhC0D41xeKBq+VtI= X-Received: by 2002:a05:6402:138f:: with SMTP id b15mr34197236edv.121.1618940295656; Tue, 20 Apr 2021 10:38:15 -0700 (PDT) MIME-Version: 1.0 From: RM Date: Tue, 20 Apr 2021 13:42:27 -0400 Message-ID: Subject: questions about virus To: bug-gzip@gnu.org Content-Type: multipart/alternative; boundary="0000000000003c395705c06ae936" Received-SPF: pass client-ip=2a00:1450:4864:20::52a; envelope-from=agencelivre@gmail.com; helo=mail-ed1-x52a.google.com X-Spam_score_int: 6 X-Spam_score: 0.6 X-Spam_bar: / X-Spam_report: (0.6 / 5.0 requ) BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Tue, 20 Apr 2021 13:39:12 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) --0000000000003c395705c06ae936 Content-Type: text/plain; charset="UTF-8" my antivirus scans continually show Gzip as containing TrojanDownloader:HTML/Elshutilo.Ayet i can't remove it because of something called trusted installer. the antivirus program "removes" the virus but at the next scan it is still/again there. please advise how to get rid of this. thank you dm --0000000000003c395705c06ae936 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
my antivirus scans continually show Gzip = as containing=C2=A0

TrojanDownloade= r:HTML/Elshutilo.A

yet i can't remove it because of something called trusted insta= ller. the antivirus program "removes" the virus but at the next s= can it is still/again there. please advise how to get rid of this. thank yo= u


dm


=


--0000000000003c395705c06ae936-- From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 20 14:15:03 2021 Received: (at 47912-done) by debbugs.gnu.org; 20 Apr 2021 18:15:03 +0000 Received: from localhost ([127.0.0.1]:55935 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYutr-0004dH-8o for submit@debbugs.gnu.org; Tue, 20 Apr 2021 14:15:03 -0400 Received: from zimbra.cs.ucla.edu ([131.179.128.68]:34902) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lYuto-0004cU-Uv for 47912-done@debbugs.gnu.org; Tue, 20 Apr 2021 14:15:01 -0400 Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 8DCAC1600D1; Tue, 20 Apr 2021 11:14:54 -0700 (PDT) Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id M1sCRUyakQuh; Tue, 20 Apr 2021 11:14:53 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id DDD0D1600EA; Tue, 20 Apr 2021 11:14:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 4AnqY49TVNAw; Tue, 20 Apr 2021 11:14:53 -0700 (PDT) Received: from [192.168.1.9] (cpe-172-91-119-151.socal.res.rr.com [172.91.119.151]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id B930A1600D1; Tue, 20 Apr 2021 11:14:53 -0700 (PDT) Subject: Re: bug#47912: questions about virus To: RM References: From: Paul Eggert Organization: UCLA Computer Science Department Message-ID: Date: Tue, 20 Apr 2021 11:14:53 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.7.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 47912-done Cc: 47912-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) On 4/20/21 10:42 AM, RM wrote: > my antivirus scans continually show Gzip as containing > TrojanDownloader:HTML/Elshutilo.Ayet i can't remove it because of something > called trusted installer. the antivirus program "removes" the virus but at > the next scan it is still/again there. please advise how to get rid of > this. thank you I'm afraid you're writing to the wrong place; we merely maintain the upstream source code and do not generate the binary executable that your software is complaining about. I suggest writing to whoever generated the program you're actually running. Or pedrhaps you can write to whoever is maintaining your antivirus software. From unknown Sat Jun 14 14:24:25 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 19 May 2021 11:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator