[MinGW-Notify] [mingw] #40613: Viruses when compiling with gcc or g++

アーカイブの一覧に戻る
MinGW Notification List mingw****@lists*****
Wed Sep 2 06:38:40 JST 2020


#40613: Viruses when compiling with gcc or g++

  Open Date: 2020-08-04 05:37
Last Update: 2020-09-01 22:38

URL for this Ticket:
    https://osdn.net//projects/mingw/ticket/40613
RSS feed for this Ticket:
    https://osdn.net/ticket/ticket_rss.php?group_id=3917&tid=40613

---------------------------------------------------------------------

Last Changes/Comment on this Ticket:
2020-09-01 22:38 Updated by: keith
 * Status Update from Open to Closed

 * Resolution Update from None to Won't Fix

 * Severity Update from 9 - Highest to 1 - Lowest

 * Priority Update from 9 - Highest to 1 - Lowest


Comment:

Did you read the ticket submission guidelines? If you did, you chose to ignore
them, which isn't going to earn you any credibility here.

Did you check the GPG signatures of the package files you downloaded? We do not
publish infected files, so if the signatures match, then perhaps you have
infected what you uploaded to VirusTotal. Otherwise, VirusTotal is probably
wrong. FWIW, I have absolutely zero confidence in VirusTotal, anyway, so I'm
closing this, and will take no consequent action.



---------------------------------------------------------------------
Ticket Status:

      Reporter: int8
         Owner: (None)
          Type: Issues
        Status: Closed
      Priority: 1 - Lowest
     MileStone: (None)
     Component: GCC
      Severity: 1 - Lowest
    Resolution: Won't Fix
---------------------------------------------------------------------

Ticket details:

I downloaded mingw-get-setup.exe and used it to install gcc, g++, and MSYS. I
compiled a simple binary which does nothing except print hello world and
uploaded it to virustotal.com. To my horror, virustotal found numerous
positives in the hello world executables. I am almost positive that there is no
way that virustotal would have this many false positives, so please look into
rebuilding whatever part of MinGW is the source of this malware. Attached are
links to the virustotal scans of basic hello world executables compiled with
gcc and g++ from MinGW, along with whatever I could dredge up on the web
pertaining to this.

https://www.virustotal.com/gui/file/
561a3bdcef261beb2a58dca5d51d4d7d561d555d4caa6606eb3e481bf1141e16/detection
https://www.virustotal.com/gui/file/
176cf53ca0564af53fbde5ee65963dbdfb4ea426bac821bbba2c71148cdb9806/detection
https://github.com/Genymobile/scrcpy/issues/1102



-- 
Ticket information of MinGW - Minimalist GNU for Windows project
MinGW - Minimalist GNU for Windows Project is hosted on OSDN

Project URL: https://osdn.net/projects/mingw/
OSDN: https://osdn.net

URL for this Ticket:
    https://osdn.net/projects/mingw/ticket/40613
RSS feed for this Ticket:
    https://osdn.net/ticket/ticket_rss.php?group_id=3917&tid=40613



More information about the MinGW-Notify mailing list
アーカイブの一覧に戻る