<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Upload one of the binaries it flagged to <a href="https://www.virustotal.com/en/">https://www.virustotal.com/en/</a> and send the link.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>As far as I can tell, they’re all clean</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><a href="https://www.virustotal.com/en/file/9cc2a6032dde8d8ab572f9491041242ab4c76d2b7d36eea5283c82cf9bf9fd69/analysis/">https://www.virustotal.com/en/file/9cc2a6032dde8d8ab572f9491041242ab4c76d2b7d36eea5283c82cf9bf9fd69/analysis/</a></p><p class=MsoNormal>https://www.virustotal.com/en/file/5ffdaa7da4381637ab2a0ec327118cd933398a477430e2f5d94e9d53c53f2782/analysis/</p><p class=MsoNormal><o:p> </o:p></p><div style='mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='border:none;padding:0in'><b>From: </b><a href="mailto:matt.lamari@gmail.com">Matthew Lamari</a><br><b>Sent: </b>Thursday, December 28, 2017 20:29<br><b>To: </b><a href="mailto:ghc-devs@haskell.org">ghc-devs@haskell.org</a><br><b>Subject: </b>Haskell Platform 8.2.2 - virus?</p></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>New Haskell install was tripping my Bitdefender like crazy and in weird</p><p class=MsoNormal>ways - not new as that's how bitdefender rolls. However, I retested in a</p><p class=MsoNormal> clean test, with (free) Hitman Pro</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I started from a base case with 2 clean windows 8 VMs.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>New 8.2.2 install - has virus</p><p class=MsoNormal>Old 8.0.2 Jan 2017 - no virus</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>According to Hitman Pro, touchy.exe, haddock-8.2.2, ghc-8.2.2.exe, and</p><p class=MsoNormal>unlit.exe have some problem post-install. I went no further on the VMs.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>"Detection Names</p><p class=MsoNormal>Kaspersky Trojan-Downloader.Win32.Paph.fsv</p><p class=MsoNormal>"</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Bitdefender didn't get it on install but would lock the whole thing down</p><p class=MsoNormal>on the first run of "Cabal".</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>_______________________________________________</p><p class=MsoNormal>ghc-devs mailing list</p><p class=MsoNormal>ghc-devs@haskell.org</p><p class=MsoNormal>http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs</p><p class=MsoNormal><o:p> </o:p></p></div></body></html>