From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <bjoern.appel@gmail.com>
X-Spam-Checker-Version: SpamAssassin 3.1.3 (2006-06-01) on yquem.inria.fr
X-Spam-Level: **
X-Spam-Status: No, score=2.8 required=5.0 tests=DNS_FROM_RFC_POST,SPF_NEUTRAL 
	autolearn=disabled version=3.1.3
X-Original-To: caml-list@yquem.inria.fr
Delivered-To: caml-list@yquem.inria.fr
Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83])
	by yquem.inria.fr (Postfix) with ESMTP id C1ACFBBAF
	for <caml-list@yquem.inria.fr>; Wed, 25 Feb 2009 20:03:46 +0100 (CET)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AtICAGEjpUnRVdyhkGdsb2JhbACUKD8BAQEBCQkMBxEDswOBA5AsAQMBA4QOBg
X-IronPort-AV: E=Sophos;i="4.38,266,1233529200"; 
   d="scan'208";a="21679680"
Received: from mail-fx0-f161.google.com ([209.85.220.161])
  by mail2-smtp-roc.national.inria.fr with ESMTP; 25 Feb 2009 20:03:46 +0100
Received: by fxm5 with SMTP id 5so136393fxm.9
        for <caml-list@inria.fr>; Wed, 25 Feb 2009 11:03:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:received:in-reply-to:references
         :date:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        bh=/HW0f389MD5W8EHPkwvoHXF9Exk1Yh2cHBHQ8IgX7zs=;
        b=AgyfsA862eVu6l8+o9EZxI/vqXBq1vTyeg5kwubaO1U+8SKm4mbTbp9LGK21jOk4Jo
         v+emrxUhFG9ATHnY962J4MS9az4PTIsbuV1o0iEBLPS5ipy37bPd3TPBpM8oCbCaFwWH
         UkYqa1ri4KbZlCDSz4/ZCBBc6H2oCxU9L485o=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=LITIvQVrOxEM00AshJzcLo8pOeJsda9It/niPkpschgP+VVr39OVMKeowYpSHmieeF
         52dGKAyEXyVxZIjipendSI7mWaGWtGjF+dkPu8FGAB6kW2LKgL2H3OX6WXok+dhcNG3N
         zA7m32ZxXBBEKrqyjh8wAub6xwqpOsy7HvDAQ=
MIME-Version: 1.0
Received: by 10.223.105.72 with SMTP id s8mr371439fao.9.1235588626403; Wed, 25 
	Feb 2009 11:03:46 -0800 (PST)
In-Reply-To: <49A587DE.8010101@msu.edu>
References: <49A587DE.8010101@msu.edu>
Date: Wed, 25 Feb 2009 20:03:46 +0100
Message-ID: <cd5c37650902251103p1602bee8ta095a098e22b59ba@mail.gmail.com>
Subject: Re: [Caml-list] ocaml 3.11 mingw virus false positive?
From: Bjoern Appel <bjoern.appel@gmail.com>
To: caml-list@inria.fr
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Spam: no; 0.00; ocaml:01 mingw:01 ocaml:01 mingw:01 windowsxp:01 2009:98 wrote:01 caml-list:01 let:03 alert:95 problem:05 installed:05 wed:06 linux:07 feb:08 

On Wed, Feb 25, 2009 at 7:03 PM, Jeff Shaw <shawjef3@msu.edu> wrote:
> I report at the following link that Antivir reports ocaml exectuables as
> containing a virus they call TR/Dropper.Gen. I'm assuming for now that th=
is
> is a false positive, but just in case it isn't I want to let others know
> about it.


Thanks for that report. Usually I program under Linux but yesterday I
installed OCaml MinGW on WindowsXP with Avira running and I got the
same alert while installing and running OCaml.

Today I used the online scanner VirusTotal in order to double-check.
They run 38 different scanners and only AntiVir and SecureWeb-Gateway
reported a problem. Thus I believe this might be a false positive.
Here is there result:

https://www.virustotal.com/analisis/3eca85145ffc0bda122536926930181f


Bj=F6rn