<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<p>The site gave me the 5ffdaa sha256 you have below for touchy.exe.</p>
<p>That said, I still have the 2 builds yield different results from
Hitman Pro on the clean boxes. And Bitdefender, on my machine,
(albeit being obtuse) chucks a fit over it. It doesn't detect the
EXE files; but detects secondary consequences of them running.</p>
<p><br>
</p>
<p><b>I really think something is afoot here.</b><br>
</p>
<p><br>
</p>
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 12/28/2017 3:00 PM,
<a class="moz-txt-link-abbreviated" href="mailto:lonetiger@gmail.com">lonetiger@gmail.com</a> wrote:<br>
</div>
<blockquote type="cite"
cite="mid:5a455b51.11101c0a.8d50f.f644@mx.google.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
<div class="WordSection1">
<p class="MsoNormal">Upload one of the binaries it flagged to <a
href="https://www.virustotal.com/en/" moz-do-not-send="true">https://www.virustotal.com/en/</a>
and send the link.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">As far as I can tell, they’re all clean</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a
href="https://www.virustotal.com/en/file/9cc2a6032dde8d8ab572f9491041242ab4c76d2b7d36eea5283c82cf9bf9fd69/analysis/"
moz-do-not-send="true">https://www.virustotal.com/en/file/9cc2a6032dde8d8ab572f9491041242ab4c76d2b7d36eea5283c82cf9bf9fd69/analysis/</a></p>
<p class="MsoNormal"><a class="moz-txt-link-freetext" href="https://www.virustotal.com/en/file/5ffdaa7da4381637ab2a0ec327118cd933398a477430e2f5d94e9d53c53f2782/analysis/">https://www.virustotal.com/en/file/5ffdaa7da4381637ab2a0ec327118cd933398a477430e2f5d94e9d53c53f2782/analysis/</a></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div
style="mso-element:para-border-div;border:none;border-top:solid
#E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="border:none;padding:0in"><b>From:
</b><a href="mailto:matt.lamari@gmail.com"
moz-do-not-send="true">Matthew Lamari</a><br>
<b>Sent: </b>Thursday, December 28, 2017 20:29<br>
<b>To: </b><a href="mailto:ghc-devs@haskell.org"
moz-do-not-send="true">ghc-devs@haskell.org</a><br>
<b>Subject: </b>Haskell Platform 8.2.2 - virus?</p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">New Haskell install was tripping my
Bitdefender like crazy and in weird</p>
<p class="MsoNormal">ways - not new as that's how bitdefender
rolls. However, I retested in a</p>
<p class="MsoNormal"> clean test, with (free) Hitman Pro</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I started from a base case with 2 clean
windows 8 VMs.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">New 8.2.2 install - has virus</p>
<p class="MsoNormal">Old 8.0.2 Jan 2017 - no virus</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">According to Hitman Pro, touchy.exe,
haddock-8.2.2, ghc-8.2.2.exe, and</p>
<p class="MsoNormal">unlit.exe have some problem post-install. I
went no further on the VMs.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">"Detection Names</p>
<p class="MsoNormal">Kaspersky
Trojan-Downloader.Win32.Paph.fsv</p>
<p class="MsoNormal">"</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Bitdefender didn't get it on install but
would lock the whole thing down</p>
<p class="MsoNormal">on the first run of "Cabal".</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">_______________________________________________</p>
<p class="MsoNormal">ghc-devs mailing list</p>
<p class="MsoNormal"><a class="moz-txt-link-abbreviated" href="mailto:ghc-devs@haskell.org">ghc-devs@haskell.org</a></p>
<p class="MsoNormal"><a class="moz-txt-link-freetext" href="http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs">http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs</a></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</blockquote>
<br>
</body>
</html>