Bug 339318

Summary:	Virus found in Gpg4win 2.2.2 download
Product:	[Applications] kleopatra	Reporter:	bluesaltred
Component:	general	Assignee:	kdepim bugs <kdepim-bugs>
Status:	RESOLVED NOT A BUG
Severity:	crash	CC:	aheinecke, mutz
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Microsoft Windows
OS:	Microsoft Windows
URL:	http://www.gpg4win.org/download.html
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description bluesaltred 2014-09-23 05:59:01 UTC

I was directed to GPG4WIN from the Tails download/ verify ISO page. In order to confirm the key for Tails I needed to instalL GPG4WIN.   I was given a desktop icon to run Kleopatra from.  
AVG auto detected  an ''unkown''  (which it informed me was a virus)  in BIN/dbus-daemon.exe
When I removed it Kleopatra froze and would not let me close the window,  the desktop largely froze also.  After rebooting AVG found the exact entity in the same place,  and Kleopatra froze again.   
I am using windows 7 .  

Reproducible: Always

Steps to Reproduce:
1. Install GPG 4 Win 2.2.2   from the very top of the list on the download page provided
2. Run Kleopatra from desktop icon in windows 7 
3. AVG detects a virus in BIN/dbus-daemon.exe

Please forgive my newbie status - you were one once!  ;-)

Comment 1 Andre Heinecke 2015-09-02 08:15:15 UTC

Sadly false positives regularly appear on some AV scanners with each new release. If you've verified the signature or the SHA1 checksum of the package you can be fairly sure it's a false positive.

The best you can do in those cases is to check virustotal.com to see if your virus scanner is an outlier and report it to the publisher of your AV scanner as a false positive.