Trojan on Filezilla server download from sourceforge ???????

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
nazcouik
500 Command not understood
Posts: 1
Joined: 2004-09-07 22:28

Trojan on Filezilla server download from sourceforge ???????

#1 Post by nazcouik » 2004-09-07 22:32

name : TrojanDownloader.Win32.Wintrim.bn

i get a big surprise when i try install the exe just downloaded from sourceforge !

Trojan inside ftp server ..........

seek for info , thx !

User avatar
botg
Site Admin
Posts: 35509
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

#2 Post by botg » 2004-09-08 08:24

Like always a false alarm.

TheAngryPenguin
226 Transfer OK
Posts: 323
Joined: 2004-03-08 18:40

#3 Post by TheAngryPenguin » 2004-09-08 16:01

Right -- very likely a false alarm; but it would be interesting to see the MD5 checksum of what the OP downloaded.

It might be a good idea to start including at least an MD5 checksum with the files that are made available; or better yet, make a gpg signature available.

das111
500 Command not understood
Posts: 2
Joined: 2004-10-15 05:21

What constitutes a false alarm?

#4 Post by das111 » 2004-10-15 05:30

I was just wondering what you mean when you say it is a false alarm. Does it mean that you go to check for the virus in the download file? The reason I ask is because I downloaded Filezilla and installed it on a few freshly installed machines and found a trojan installer come up within the next 24 hours on all 3 machines. Filezilla was the only common denomonator, so it just makes sense that something related to the Filezilla download or install was insecure. I have norton AV and spybot on this machine, which was one of the 3.

Anyway, my question is whether or not it could be possible that the trojan installer were somehow tacked on during download from a hacker or something extremely unlikely like that.

I just ran AV scan and spybot, so I am ready to try again. Now if I get another trojan installer it must mean there is something going on and you should look into it to protect your name as well as your consumer's computers.

User avatar
botg
Site Admin
Posts: 35509
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

#5 Post by botg » 2004-10-15 07:20

All files get tested for viruses before being uploaded to Sourceforge and tested for integrety afterwards. As long as you download FileZilla from http://sourceforge.net/projects/filezilla, it will not contain any malicious software.

das111
500 Command not understood
Posts: 2
Joined: 2004-10-15 05:21

Check came out clean

#6 Post by das111 » 2004-10-15 16:26

Well, this time the check came out clean, as I am sure it usually does. It seems it probably wasn't related to this download, but I really wonder how all three computers I installed Filezilla on (2 at work and one at home) got infected that one day. Oh, well. These are the mysteries of modern computing.

Golyc
226 Transfer OK
Posts: 89
Joined: 2004-03-02 23:36

Re: Check came out clean

#7 Post by Golyc » 2004-10-15 21:49

das111 wrote:Well, this time the check came out clean, as I am sure it usually does. It seems it probably wasn't related to this download, but I really wonder how all three computers I installed Filezilla on (2 at work and one at home) got infected that one day. Oh, well. These are the mysteries of modern computing.
No they aren't .. these are the mysteries of the modern cracking ... :(

Post Reply