[jira] [Comment Edited] (INFRA-12508) I want to report that your latest distibution contains a Trojan

["Sebb (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/INFRA-12508?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15439673#comment-15439673 ] 

Sebb edited comment on INFRA-12508 at 8/26/16 7:46 PM:
-------------------------------------------------------

There are various tools for calculating hashes.

I have used http://implbits.com/products/hashtab/ successfully in the past.

Note: I tried downloading from http://www.groovy-lang.org/download.html
The default download is called apache-groovy-sdk-2.4.7.zip which is different from what you reported

However there is also a Windows Installer download which is https://dl.bintray.com/groovy/Distributions/groovy-2.4.7-installer.exe
This was the same size, i.e. 52,613,519 bytes
I get the following hashes:
MD5 5278DB2AB0F0D1D45317CE1B7D76F61D
SHA1 C65A3E9C2FD68356DB858643C092D12C4A700092

I tried scanning it with an uptodate version of MS Essentials - no problems reported
I then ran the installer and checked the directory structure - again no problem


was (Author: sebb@apache.org):
There are various tools for calculating hashes.

I have used http://implbits.com/products/hashtab/ successfully in the past.

Note: I tried downloading from http://www.groovy-lang.org/download.html
The default download is called apache-groovy-sdk-2.4.7.zip; this comes fromr 
However there is also a Windows Installer download which is https://dl.bintray.com/groovy/Distributions/groovy-2.4.7-installer.exe
This was the same size, i.e. 52,613,519 bytes
I get the following hashes:
MD5 5278DB2AB0F0D1D45317CE1B7D76F61D
SHA1 C65A3E9C2FD68356DB858643C092D12C4A700092

I tried scanning it with an uptodate version of MS Essentials - no problems reported
I then ran the installer and checked the directory structure - again no problem

> I want to report that your latest distibution contains a Trojan
> ---------------------------------------------------------------
>
>                 Key: INFRA-12508
>                 URL: https://issues.apache.org/jira/browse/INFRA-12508
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: Dists
>            Reporter: Robert Murphy
>         Attachments: MSE_Groovy2_4_7.PNG
>
>
> Your latest distribution, 2.4.7 contains the Trojan Rundas!plock in its uninstall.exe.  If you wish to contact me for further information, use robert.murphy@harman.com
> (I have no idea what to fill out for the Component field, and I can't spare the time today to figure it out.)
> Thank you



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)