You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@openoffice.apache.org by John Marsh <jm...@jocama.com> on 2012/07/22 20:16:46 UTC
Possible Trojan in AOO installer
Hello,
Today I downloaded Apache OpenOffice 3.4.0 from the Apache website (
www.openoffice.org/download )The MD5 hash checked out ok. When I opened the
installer I got an immediate alert from my security software (Norton
Internet Security 2012) that it had found and removed a virus (see attached
screenshot).
I realize that this may be a false positive but I am unwilling to retry
installation of AOO without some feedback from you.
John Marsh
jmarsh@jocama.com
Re: Possible Trojan in AOO installer
Posted by Andrea Pescetti <pe...@apache.org>.
On 22/07/2012 John Marsh wrote:
> Today I downloaded Apache OpenOffice 3.4.0 from the Apache website (
> www.openoffice.org/download )The MD5 hash checked out ok. When I opened the
> installer I got an immediate alert from my security software (Norton
> Internet Security 2012) that it had found and removed a virus (see attached
> screenshot).
> I realize that this may be a false positive but I am unwilling to retry
> installation of AOO without some feedback from you.
Dear John, you probably didn't receive the three answers below since you
are not subscribed to this public mailing list. See
http://www.openoffice.org/mail_list.html
---
Dan
If the MD5 hash checks out, then you have the very same file as
that AOO created; no Trojan horses, nor malware. It is safe to install
the program. As you stated, Norton gave you a false positive. However,
you need to follow the following instructions to install AOO without
getting a false positive. Norton will give you problems when installing
AOO unless you turn Norton off first. But to protect your computer you
need to follow these steps in the order listed.
There are specific steps to installing AOO:
1. Physically remove the computer from the Internet (remove RJ45 cable
or turn off wireless). DO NOT CONTINUE UNTIL YOU HAVE DONE THIS.
2. Close your anti-virus program (Norton in this case).
3. Install AOO.
4. Open your anti-virus program (it must be running before doing the
next step).
5. Connect the computer to the Internet.
--Dan
---
David H. Lipman
It's a False Positive on a "trojan" not a virus.
---
Kandi Bauer
that's odd mine work just fine when Installed it. Kandi Bauer
---
Regards,
Andrea.
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
[Resolved] RE: Possible Trojan in AOO installer
Posted by John Marsh <jm...@jocama.com>.
Rob,
We can consider this question resolved.
John Marsh
-----Original Message-----
From: NoOp [mailto:glgxg@sbcglobal.net]
Sent: Tuesday, July 24, 2012 9:43 PM
To: ooo-users@incubator.apache.org
Subject: Re: Possible Trojan in AOO installer
On 07/23/2012 01:47 PM, John Marsh wrote:
> Good point Rob. I'm inclined to think that the keylogger had nothing
> to do with my AOO download and Norton's warning just happened to
> coincide with my clicking on the AOO installer.
>
> John Marsh
>
If that is the case, then it would be nice if you can confirm, and, tag
the reply as: '[Resolved] Re: Possible Trojan in AOO installer'. That
way others that pick up this thread here, on the internet, or elsewhere
and do not read the entire thread, won't simply jump to the conclusion
that AOO intaller has a possible trojan.
> -----Original Message-----
> From: Rob Weir...
>
> Something to be aware of. The original poster attached a screen shot of
the
> error message. It may have been stripped from the list, but as moderator
I
> received a copy. The error message was not complaining about the AOO
> installer or executable. It referenced another file, a keylogger file.
>
> -Rob
...
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Possible Trojan in AOO installer
Posted by NoOp <gl...@sbcglobal.net>.
On 07/23/2012 01:47 PM, John Marsh wrote:
> Good point Rob. I'm inclined to think that the keylogger had nothing to do
> with my AOO download and Norton's warning just happened to coincide with my
> clicking on the AOO installer.
>
> John Marsh
>
If that is the case, then it would be nice if you can confirm, and, tag
the reply as: '[Resolved] Re: Possible Trojan in AOO installer'. That
way others that pick up this thread here, on the internet, or elsewhere
and do not read the entire thread, won't simply jump to the conclusion
that AOO intaller has a possible trojan.
> -----Original Message-----
> From: Rob Weir...
>
> Something to be aware of. The original poster attached a screen shot of the
> error message. It may have been stripped from the list, but as moderator I
> received a copy. The error message was not complaining about the AOO
> installer or executable. It referenced another file, a keylogger file.
>
> -Rob
...
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
RE: Possible Trojan in AOO installer
Posted by John Marsh <jm...@jocama.com>.
Good point Rob. I'm inclined to think that the keylogger had nothing to do
with my AOO download and Norton's warning just happened to coincide with my
clicking on the AOO installer.
John Marsh
-----Original Message-----
From: Rob Weir [mailto:robweir@apache.org]
Sent: Monday, July 23, 2012 3:58 PM
To: ooo-users@incubator.apache.org
Subject: Re: Possible Trojan in AOO installer
On Mon, Jul 23, 2012 at 2:01 PM, Michelle Konzack
<li...@tamay-dogan.net> wrote:
> Hello Dan,
>
> Your suggestion does will not work, because...
>
> Am 2012-07-22 15:32:26, hacktest Du folgendes herunter:
>> There are specific steps to installing AOO:
>>
>> 1. Physically remove the computer from the Internet (remove RJ45 cable
>> or turn off wireless). DO NOT CONTINUE UNTIL YOU HAVE DONE THIS.
>> 2. Close your anti-virus program (Norton in this case). 3. Install
>> AOO.
>
> He has to download AOO first, then it is hit by Norton and if he
> turn off Norton, to download AOO, then he has no protection from the
> Internet
>
> It is called "the chicken and the egg" problem!
>
> I had several problem at customers which where not able to
> download files because Norton has killed them directly AFTER
> downloading and sometimes WHILE downloading.
>
Something to be aware of. The original poster attached a screen shot of the
error message. It may have been stripped from the list, but as moderator I
received a copy. The error message was not complaining about the AOO
installer or executable. It referenced another file, a keylogger file.
-Rob
> Thanks, Greetings and nice Day/Evening
> Michelle Konzack
>
> --
> ##################### Debian GNU/Linux Consultant ######################
> Development of Intranet and Embedded Systems with Debian GNU/Linux
> Internet Service Provider, Cloud Computing
> <http://www.itsystems.tamay-dogan.net/>
>
> itsystems@tdnet Jabber linux4michelle@jabber.ccc.de
> Owner Michelle Konzack
>
> Gewerbe Strasse 3 Tel office: +49-176-86004575
> 77694 Kehl Tel mobil: +49-177-9351947
> Germany Tel mobil: +33-6-61925193 (France)
>
> USt-ID: DE 278 049 239
>
> Linux-User #280138 with the Linux Counter, http://counter.li.org/
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Possible Trojan in AOO installer
Posted by Rob Weir <ro...@apache.org>.
On Mon, Jul 23, 2012 at 2:01 PM, Michelle Konzack
<li...@tamay-dogan.net> wrote:
> Hello Dan,
>
> Your suggestion does will not work, because...
>
> Am 2012-07-22 15:32:26, hacktest Du folgendes herunter:
>> There are specific steps to installing AOO:
>>
>> 1. Physically remove the computer from the Internet (remove RJ45 cable
>> or turn off wireless). DO NOT CONTINUE UNTIL YOU HAVE DONE THIS.
>> 2. Close your anti-virus program (Norton in this case).
>> 3. Install AOO.
>
> He has to download AOO first, then it is hit by Norton and if he turn
> off Norton, to download AOO, then he has no protection from the Internet
>
> It is called "the chicken and the egg" problem!
>
> I had several problem at customers which where not able to download
> files because Norton has killed them directly AFTER downloading and
> sometimes WHILE downloading.
>
Something to be aware of. The original poster attached a screen shot
of the error message. It may have been stripped from the list, but as
moderator I received a copy. The error message was not complaining
about the AOO installer or executable. It referenced another file, a
keylogger file.
-Rob
> Thanks, Greetings and nice Day/Evening
> Michelle Konzack
>
> --
> ##################### Debian GNU/Linux Consultant ######################
> Development of Intranet and Embedded Systems with Debian GNU/Linux
> Internet Service Provider, Cloud Computing
> <http://www.itsystems.tamay-dogan.net/>
>
> itsystems@tdnet Jabber linux4michelle@jabber.ccc.de
> Owner Michelle Konzack
>
> Gewerbe Strasse 3 Tel office: +49-176-86004575
> 77694 Kehl Tel mobil: +49-177-9351947
> Germany Tel mobil: +33-6-61925193 (France)
>
> USt-ID: DE 278 049 239
>
> Linux-User #280138 with the Linux Counter, http://counter.li.org/
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Possible Trojan in AOO installer
Posted by Dan <el...@gmail.com>.
Niall Martin wrote:
> It is so often that Norton causes problems for users. Dan should seriously consider using an alternative
> security programme. Many people use Avast or F-Secure. I use F-Prot. There are many others.
I'm not the OP, and I don't use Norton because I have heard too
many bad things about it.
--Dan
>
> On 23 Jul 2012 at 20:01, Michelle Konzack wrote:
>
> Send reply to: ooo-users@incubator.apache.org
> Date sent: Mon, 23 Jul 2012 20:01:04 +0200
> From: Michelle Konzack <li...@tamay-dogan.net>
> To: ooo-users@incubator.apache.org
> Subject: Re: Possible Trojan in AOO installer
> Organization: Tamay Dogan Network
>
>> Hello Dan,
>>
>> Your suggestion does will not work, because...
>>
>> Am 2012-07-22 15:32:26, hacktest Du folgendes herunter:
>>> There are specific steps to installing AOO:
>>>
>>> 1. Physically remove the computer from the Internet (remove RJ45
>>> cable
>>> or turn off wireless). DO NOT CONTINUE UNTIL YOU HAVE DONE THIS.
>>> 2. Close your anti-virus program (Norton in this case).
>>> 3. Install AOO.
>>
>> He has to download AOO first, then it is hit by Norton and if he
>> turn off Norton, to download AOO, then he has no protection from the
>> Internet
>>
>> It is called "the chicken and the egg" problem!
>>
>> I had several problem at customers which where not able to
>> download files because Norton has killed them directly AFTER
>> downloading and sometimes WHILE downloading.
>>
>> Thanks, Greetings and nice Day/Evening
>> Michelle Konzack
>>
>> --
>> ##################### Debian GNU/Linux Consultant
>> ######################
>> Development of Intranet and Embedded Systems with Debian GNU/Linux
>> Internet Service Provider, Cloud Computing
>> <http://www.itsystems.tamay-dogan.net/>
>>
>> itsystems@tdnet Jabber
>> linux4michelle@jabber.ccc.de Owner Michelle Konzack
>>
>> Gewerbe Strasse 3 Tel office: +49-176-86004575
>> 77694 Kehl Tel mobil: +49-177-9351947
>> Germany Tel mobil: +33-6-61925193
>> (France)
>>
>> USt-ID: DE 278 049 239
>>
>> Linux-User #280138 with the Linux Counter, http://counter.li.org/
>>
>
>
> Niall Martin
> Phone 0131 4678468
> Please reply to: niall<at>rndmartin.cix.co.uk
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
> For additional commands, e-mail: ooo-users-help@incubator.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Possible Trojan in AOO installer
Posted by Niall Martin <ni...@blueyonder.co.uk>.
It is so often that Norton causes problems for users. Dan should seriously consider using an alternative
security programme. Many people use Avast or F-Secure. I use F-Prot. There are many others.
On 23 Jul 2012 at 20:01, Michelle Konzack wrote:
Send reply to: ooo-users@incubator.apache.org
Date sent: Mon, 23 Jul 2012 20:01:04 +0200
From: Michelle Konzack <li...@tamay-dogan.net>
To: ooo-users@incubator.apache.org
Subject: Re: Possible Trojan in AOO installer
Organization: Tamay Dogan Network
> Hello Dan,
>
> Your suggestion does will not work, because...
>
> Am 2012-07-22 15:32:26, hacktest Du folgendes herunter:
> > There are specific steps to installing AOO:
> >
> > 1. Physically remove the computer from the Internet (remove RJ45
> > cable
> > or turn off wireless). DO NOT CONTINUE UNTIL YOU HAVE DONE THIS.
> > 2. Close your anti-virus program (Norton in this case).
> > 3. Install AOO.
>
> He has to download AOO first, then it is hit by Norton and if he
> turn off Norton, to download AOO, then he has no protection from the
> Internet
>
> It is called "the chicken and the egg" problem!
>
> I had several problem at customers which where not able to
> download files because Norton has killed them directly AFTER
> downloading and sometimes WHILE downloading.
>
> Thanks, Greetings and nice Day/Evening
> Michelle Konzack
>
> --
> ##################### Debian GNU/Linux Consultant
> ######################
> Development of Intranet and Embedded Systems with Debian GNU/Linux
> Internet Service Provider, Cloud Computing
> <http://www.itsystems.tamay-dogan.net/>
>
> itsystems@tdnet Jabber
> linux4michelle@jabber.ccc.de Owner Michelle Konzack
>
> Gewerbe Strasse 3 Tel office: +49-176-86004575
> 77694 Kehl Tel mobil: +49-177-9351947
> Germany Tel mobil: +33-6-61925193
> (France)
>
> USt-ID: DE 278 049 239
>
> Linux-User #280138 with the Linux Counter, http://counter.li.org/
>
Niall Martin
Phone 0131 4678468
Please reply to: niall<at>rndmartin.cix.co.uk
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Possible Trojan in AOO installer
Posted by Michelle Konzack <li...@tamay-dogan.net>.
Hello Dan,
Your suggestion does will not work, because...
Am 2012-07-22 15:32:26, hacktest Du folgendes herunter:
> There are specific steps to installing AOO:
>
> 1. Physically remove the computer from the Internet (remove RJ45 cable
> or turn off wireless). DO NOT CONTINUE UNTIL YOU HAVE DONE THIS.
> 2. Close your anti-virus program (Norton in this case).
> 3. Install AOO.
He has to download AOO first, then it is hit by Norton and if he turn
off Norton, to download AOO, then he has no protection from the Internet
It is called "the chicken and the egg" problem!
I had several problem at customers which where not able to download
files because Norton has killed them directly AFTER downloading and
sometimes WHILE downloading.
Thanks, Greetings and nice Day/Evening
Michelle Konzack
--
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux
Internet Service Provider, Cloud Computing
<http://www.itsystems.tamay-dogan.net/>
itsystems@tdnet Jabber linux4michelle@jabber.ccc.de
Owner Michelle Konzack
Gewerbe Strasse 3 Tel office: +49-176-86004575
77694 Kehl Tel mobil: +49-177-9351947
Germany Tel mobil: +33-6-61925193 (France)
USt-ID: DE 278 049 239
Linux-User #280138 with the Linux Counter, http://counter.li.org/
Re: Possible Trojan in AOO installer
Posted by Dan <el...@gmail.com>.
John Marsh wrote:
> Hello,
>
> Today I downloaded Apache OpenOffice 3.4.0 from the Apache website (
> www.openoffice.org/download )The MD5 hash checked out ok. When I opened the
> installer I got an immediate alert from my security software (Norton
> Internet Security 2012) that it had found and removed a virus (see attached
> screenshot).
>
> I realize that this may be a false positive but I am unwilling to retry
> installation of AOO without some feedback from you.
>
> John Marsh
> jmarsh@jocama.com
If the MD5 hash checks out, then you have the very same file as
that AOO created; no Trojan horses, nor malware. It is safe to install
the program. As you stated, Norton gave you a false positive. However,
you need to follow the following instructions to install AOO without
getting a false positive. Norton will give you problems when installing
AOO unless you turn Norton off first. But to protect your computer you
need to follow these steps in the order listed.
There are specific steps to installing AOO:
1. Physically remove the computer from the Internet (remove RJ45 cable
or turn off wireless). DO NOT CONTINUE UNTIL YOU HAVE DONE THIS.
2. Close your anti-virus program (Norton in this case).
3. Install AOO.
4. Open your anti-virus program (it must be running before doing the
next step).
5. Connect the computer to the Internet.
--Dan
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
RE: Possible Trojan in AOO installer
Posted by Kandi Bauer <ka...@hotmail.com>.
that's odd mine work just fine when Installed it. Kandi Bauer
Re: Possible Trojan in AOO installer
Posted by "David H. Lipman" <DL...@Verizon.Net>.
From: "John Marsh" <jm...@jocama.com>
> Hello,
>
> Today I downloaded Apache OpenOffice 3.4.0 from the Apache website (
> www.openoffice.org/download )The MD5 hash checked out ok. When I opened the
> installer I got an immediate alert from my security software (Norton
> Internet Security 2012) that it had found and removed a virus (see attached
> screenshot).
>
> I realize that this may be a false positive but I am unwilling to retry
> installation of AOO without some feedback from you.
>
> John Marsh
It's a False Positive on a "trojan" not a virus.
--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org