/srv/irclogs.ubuntu.com/2024/03/14/#ubuntustudio.txt

=== guiverc2 is now known as guiverc
StudioUser21The files below should be analyzed with a decompiler. They belong to your official distribution. They are reported by Clamav: /usr/lib/python3/dist-packages/distlib/t64-arm.exe: Win.Virus.Expiro-10022939-0 FOUND02:10
oerheksfrom flatpak?02:12
oerheksoh dear02:12
oerheksa window thingy02:13
semitonesWhat is that02:29
oerheksflatpak?02:29
oerheksdunno. 02:29
arraybolt3That file doesn't exist on my Jammy Ubuntu Studio ISO...03:33
arraybolt3I get it if I install python3-distlib though.03:34
EickmeyerIt's a troll.03:34
arraybolt3Eickmeyer: Meh, I'm not entirely sure it's a *troll*, clamav might really have reported it. The file does exist if I install python3-distlib, and *one* (but only one) engine reports it as a trojan on VirusTotal.03:35
Eickmeyerarraybolt3: t64-arm.exe03:36
arraybolt3yep, that's what I just tested.03:36
arraybolt3and yes, that file does indeed exist when python3-distlib is installed.03:36
Eickmeyer*sigh*03:36
arraybolt3looks like a Windows executable when opening it, I see "MZ" at the start and "This program cannot be run in DOS mode." inside.03:37
Eickmeyerarraybolt3: Then it's a bug. It needs to be filed. End of story. /rant03:37
arraybolt3+103:37
arraybolt3probably needs bugs against python3-distutils *and* clamav03:38
EickmeyerBut I draw the line when someone comes in here and drops a line about a virus and leaves without a word.03:39
EickmeyerThat's what made me +b them.03:39
arraybolt3yeah, under most circumstances that would have been a definite troll. But the combo of a Linux virus scanner plus a file that might plausibly exist led me to dig, and the dig revealed... welp.03:40
arraybolt3speaking of digging, I need to update my Studio ISO, the one I just used is an ancient fossil at this point. (A Jammy daily image from before 22.04.4)03:40

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!