Boost logo

Boost :

Subject: Re: [boost] TROJAN INFECTION boost 1.67 binaries for Windows x64 MSVC 14.1
From: Zipper Fish (zipperfish793_at_[hidden])
Date: 2018-07-27 01:55:29


Thank you

Ok, I'll whitelist the file "boost_1_67_0-msvc-14.1-64.exe" with some
trepidation and try installing.

I normally do search archives and Google extensively for code issues, but
for a positive hit from the a virus detector, it wasn't the first idea that
popped into my head.

Just curious, why would a boost installer trigger virus detectors? Is the
virus executable linked to a boost library?

On Thu, Jul 26, 2018 at 6:41 PM, Mateusz Loskot via Boost <
boost_at_[hidden]> wrote:

> Read this thread
> https://lists.boost.org/Archives/boost/2018/05/242200.php
>
> It's always a good idea to search through the list archives first.
>
> Mateusz Loskot, mateusz_at_[hidden]
> (Sent from mobile)
>
> On Fri, 27 Jul 2018, 00:08 Zipper Fish via Boost, <boost_at_[hidden]>
> wrote:
>
> > Dear boost developers and/or release managers:
> >
> > Today I downloaded boost_1_67_0-msvc-14.1-64.exe from the Windows
> binaries
> > downloads page:
> > https://dl.bintray.com/boostorg/release/1.67.0/binaries/
> >
> > The file contains a Trojan, according to Windows Defender.
> >
> > Screenshot:
> >
> > https://usercontent.irccloud-cdn.com/file/Uy6o19AC/2018-07-
> 26%2016_29_52-Windows%20Defender%20Security%20Center.jpg
> >
> > Someone should verify this & check the other pre-built binaries ASAP to
> > reduce exposure.
> >
> > Thank you & best regards
> >
> > _______________________________________________
> > Unsubscribe & other changes:
> > http://lists.boost.org/mailman/listinfo.cgi/boost
> >
>
> _______________________________________________
> Unsubscribe & other changes: http://lists.boost.org/
> mailman/listinfo.cgi/boost
>


Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk