Hi.

I'm using Norton Security from Symantec, and it claims that the current compiler dmd-2.069.2.exe is infected with the "Trojan.Gen.2". Not a particularly harmful virus, but nevertheless I hope that's not true or you can fix that rather soon!

On Thursday, 21 January 2016 at 18:46:15 UTC, Dominikus Dittes Scherkl wrote:
> Hi.
>
> I'm using Norton Security from Symantec, and it claims that the current compiler dmd-2.069.2.exe is infected with the "Trojan.Gen.2". Not a particularly harmful virus, but nevertheless I hope that's not true or you can fix that rather soon!

I just ran it through VirusTotal and nothing came up: https://www.virustotal.com/en/url/e4fb12ce95fb0234554339a5162e736d5f337b427214b58d5bc10122fcb83435/analysis/1453402206/

On Thursday, 21 January 2016 at 18:46:15 UTC, Dominikus Dittes Scherkl wrote:
> Hi.
>
> I'm using Norton Security from Symantec, and it claims that the current compiler dmd-2.069.2.exe is infected with the "Trojan.Gen.2". Not a particularly harmful virus, but nevertheless I hope that's not true or you can fix that rather soon!

Does this pose a problem for the linux variant?

On Thursday, 21 January 2016 at 18:50:48 UTC, Brad Anderson wrote:
> On Thursday, 21 January 2016 at 18:46:15 UTC, Dominikus Dittes Scherkl wrote:
>> Hi.
>>
>> I'm using Norton Security from Symantec, and it claims that the current compiler dmd-2.069.2.exe is infected with the "Trojan.Gen.2". Not a particularly harmful virus, but nevertheless I hope that's not true or you can fix that rather soon!
>
> I just ran it through VirusTotal and nothing came up: https://www.virustotal.com/en/url/e4fb12ce95fb0234554339a5162e736d5f337b427214b58d5bc10122fcb83435/analysis/1453402206/

Hold on, that may not have scanned like I expected since I used a URL...rerunning using a file upload...

On Thursday, 21 January 2016 at 18:51:34 UTC, sclytrack wrote:
> On Thursday, 21 January 2016 at 18:46:15 UTC, Dominikus Dittes Scherkl wrote:
>> Hi.
>>
>> I'm using Norton Security from Symantec, and it claims that the current compiler dmd-2.069.2.exe is infected with the "Trojan.Gen.2". Not a particularly harmful virus, but nevertheless I hope that's not true or you can fix that rather soon!
>
> Does this pose a problem for the linux variant?

Hm. The .exe is precompiled for Windows only, so I suppose not.
But the one generating it should have a look, would be likely his
machine is infected too.

On Thursday, 21 January 2016 at 18:55:16 UTC, Brad Anderson wrote:
> On Thursday, 21 January 2016 at 18:50:48 UTC, Brad Anderson wrote:
>> On Thursday, 21 January 2016 at 18:46:15 UTC, Dominikus Dittes Scherkl wrote:
>>> Hi.
>>>
>>> I'm using Norton Security from Symantec, and it claims that the current compiler dmd-2.069.2.exe is infected with the "Trojan.Gen.2". Not a particularly harmful virus, but nevertheless I hope that's not true or you can fix that rather soon!
>>
>> I just ran it through VirusTotal and nothing came up: https://www.virustotal.com/en/url/e4fb12ce95fb0234554339a5162e736d5f337b427214b58d5bc10122fcb83435/analysis/1453402206/
>
> Hold on, that may not have scanned like I expected since I used a URL...rerunning using a file upload...

New results: https://www.virustotal.com/en/file/45e01e0eba641b02874d84fafceefac2b53a28add31ceeef2a4bfce13c1440d7/analysis/1453402410/

Now to decide if it's a false positive... (we use NSIS which I could easily see being an easily thing to have false positives with).

On Thursday, 21 January 2016 at 18:46:15 UTC, Dominikus Dittes Scherkl wrote:
> Hi.
>
> I'm using Norton Security from Symantec, and it claims that the current compiler dmd-2.069.2.exe is infected with the "Trojan.Gen.2".

That would be a false positive.

> Not a particularly harmful virus, but nevertheless I hope that's not true or you can fix that rather soon!

Unfortunately software writers do not have many options when false positives occur against their software. Please report this false positive to your antivirus vendor.

You could also check that the download has not been modified in-flight using the provided signature files. Here are my hashes:

MD5: 1f6a138851c7d27bc7df637126008614
SHA1: 5d76851618adc8c2c2cccab5111ea7f35a020002
SHA256: 45e01e0eba641b02874d84fafceefac2b53a28add31ceeef2a4bfce13c1440d7

On Thursday, 21 January 2016 at 18:58:04 UTC, Vladimir Panteleev wrote:
> You could also check that the download has not been modified in-flight using the provided signature files. Here are my hashes:
>
> MD5: 1f6a138851c7d27bc7df637126008614
> SHA1: 5d76851618adc8c2c2cccab5111ea7f35a020002
> SHA256: 45e01e0eba641b02874d84fafceefac2b53a28add31ceeef2a4bfce13c1440d7

Code signing would help protect against this. Norton also takes whether a file has code signing into account (though I believe you need a class 3 for it to really help your rating).

On Thursday, 21 January 2016 at 18:57:27 UTC, Brad Anderson wrote:
>> Hold on, that may not have scanned like I expected since I used a URL...rerunning using a file upload...
>
> New results: ...
> Now to decide if it's a false positive... (we use NSIS which I could easily see being an easily thing to have false positives with).

Results against:

2.060: https://www.virustotal.com/en/file/8da5b46e34e476c29155eff8507aa7a6a82545b1e236f27bad2b6613d2165498/analysis/1453403420/

2.066.1:
https://www.virustotal.com/en/file/a06d989365e77b46900c45ded383d16292e2ed92aba98621bc89861cc60082e3/analysis/1453403539/

Bubbasaur.

On 1/21/2016 10:46 AM, Dominikus Dittes Scherkl wrote:
> I'm using Norton Security from Symantec, and it claims that the current compiler
> dmd-2.069.2.exe is infected with the "Trojan.Gen.2". Not a particularly harmful
> virus, but nevertheless I hope that's not true or you can fix that rather soon!

I've had virus checkers claim Digital Mars software had viruses before. They were all false positives. That doesn't prove this one is a false positive, but I've heard "wolf" cried enough times that I'm pretty jaundiced about it.