LaTeX forum ⇒ LyXLyX 230RC-1 trojan detected from windows defender

Information and discussion about LyX, a WYSIWYM editor, available for Linux, Windows and Mac OS X systems.
hmpws
Posts: 2
Joined: Wed Dec 27, 2017 12:22 am

LyX 230RC-1 trojan detected from windows defender

Postby hmpws » Wed Dec 27, 2017 12:27 am

I have attached the screenshot from the detection. This is the last place I expect to find a trojan! Can the developer please check or confirm?

Screenshot 2017-12-27 11.20.53.png
Screenshot 2017-12-27 11.20.53.png (86.36 KiB) Viewed 973 times

Tags:

scottkosty
Site Moderator
Posts: 528
Joined: Sat Sep 01, 2012 6:38 am

Postby scottkosty » Wed Dec 27, 2017 12:38 am

This has come up in the past. See for example here:

https://www.mail-archive.com/search?l=mid&q=189c1a5d-de85-3323-5961-06d980188255%40lyx.org

One thing you could do is check the signature file of the downloaded file. This will confirm at least that the binary you downloaded is the same one that the Windows packager intended to upload. Note that as opposed to the thread referenced above, the Windows packager now signs binaries when sending them to the release manager.

I do not use Windows, so I don't have first-hand experience with these issues. You might want to start a new thread on lyx-users.

hmpws
Posts: 2
Joined: Wed Dec 27, 2017 12:22 am

Postby hmpws » Wed Dec 27, 2017 1:57 am

Thanks. I have posted to lyx-users. Where can I find the signature file? I downloaded from the ftp linked from the main lyx page.

scottkosty
Site Moderator
Posts: 528
Joined: Sat Sep 01, 2012 6:38 am

Postby scottkosty » Wed Dec 27, 2017 3:33 am

Thanks, for reference the mail thread you started is here:

https://www.mail-archive.com/search?l=mid&q=CAC5Snw8bdA7SRMiJBmsJt_bjfRg1JnjGAzOM4izuigzdSfpBiw%40mail.gmail.com

As for where to find the .sig files, you can find them on the same ftp where you downloaded the installer. Using gpg to verify them is easy if you have access to Linux. On Windows I think it is more complicated, but definitely doable.


Return to “LyX”

Who is online

Users browsing this forum: No registered users and 6 guests