=== guiverc2 is now known as guiverc
[02:10] <StudioUser21> The files below should be analyzed with a decompiler. They belong to your official distribution. They are reported by Clamav: /usr/lib/python3/dist-packages/distlib/t64-arm.exe: Win.Virus.Expiro-10022939-0 FOUND
[02:12] <oerheks> from flatpak?
[02:12] <oerheks> oh dear
[02:13] <oerheks> a window thingy
[02:29] <semitones> What is that
[02:29] <oerheks> flatpak?
[02:29] <oerheks> dunno. 
[03:33] <arraybolt3> That file doesn't exist on my Jammy Ubuntu Studio ISO...
[03:34] <arraybolt3> I get it if I install python3-distlib though.
[03:34] <Eickmeyer> It's a troll.
[03:35] <arraybolt3> Eickmeyer: Meh, I'm not entirely sure it's a *troll*, clamav might really have reported it. The file does exist if I install python3-distlib, and *one* (but only one) engine reports it as a trojan on VirusTotal.
[03:36] <Eickmeyer> arraybolt3: t64-arm.exe
[03:36] <arraybolt3> yep, that's what I just tested.
[03:36] <arraybolt3> and yes, that file does indeed exist when python3-distlib is installed.
[03:36] <Eickmeyer> *sigh*
[03:37] <arraybolt3> looks like a Windows executable when opening it, I see "MZ" at the start and "This program cannot be run in DOS mode." inside.
[03:37] <Eickmeyer> arraybolt3: Then it's a bug. It needs to be filed. End of story. /rant
[03:37] <arraybolt3> +1
[03:38] <arraybolt3> probably needs bugs against python3-distutils *and* clamav
[03:39] <Eickmeyer> But I draw the line when someone comes in here and drops a line about a virus and leaves without a word.
[03:39] <Eickmeyer> That's what made me +b them.
[03:40] <arraybolt3> yeah, under most circumstances that would have been a definite troll. But the combo of a Linux virus scanner plus a file that might plausibly exist led me to dig, and the dig revealed... welp.
[03:40] <arraybolt3> speaking of digging, I need to update my Studio ISO, the one I just used is an ancient fossil at this point. (A Jammy daily image from before 22.04.4)