Download Windows Version 10.03 -> Virus Warning

Started by dieter59, October 26, 2015, 06:13:49 AM

Previous topic - Next topic
Print
Go Down Pages1
User actions

dieter59

October 26, 2015, 06:13:49 AM Last Edit: October 26, 2015, 07:31:44 AM by dieter59
I tried to download the windows (zip) version of exiftool 10.03 and get a virus warning site...
I've a tool that automatically tries to download exiftool if there is a new version of it. That fails because of the virus warnig.
Does anyone have the same effect? Try this link http://www.exiftool.org/exiftool-10.03.zip, do you get the zip file or a virus warning?

Phil Harvey

#1
October 26, 2015, 07:37:30 AM
The download link works for me.  It must be your browser that doesn't like the file.  I just scanned it using the VirusTotal online scanner and it didn't find any viruses.

- Phil
...where DIR is the name of a directory/folder containing the images.  On Mac/Linux/PowerShell, use single quotes (') instead of double quotes (") around arguments containing a dollar sign ($).

dieter59

#2
October 26, 2015, 07:41:57 AM
Cool-had the effect with Chrome. If I try it with Firefox it works. But my tool still doesn't download. Have to check this must be a local problem. Thx for your fast answer!

Greetings from Germany  :D

ajft

#3
November 05, 2015, 06:18:17 PM
I've just found that 10.04 is blocked by our university's web gateway (the Windows zip file is blocked, the OSX DMG and tar.gz download fine.).  Attempting to get the zip results in:

Virus Download Blocked
Access to this file has been blocked by xxxxx in accordance with the University's policies and procedures listed below:
Acceptable Use Policy - Students
Information Technology Use Policy - Staff & Other Authorised Users
Details:
IP: xxxxx
File: exiftool(-k).exe
URL: exiftool(-k).exe

Downloaded it at home (sha1=b20352c9b5ed5b9a4f050f0599d58217f216411a  exiftool-10.04.zip)  and have scanned it on two different platforms with three virus scanners and they all say no problem.  Reporting it to our security staff via service desk gets the following:

QuoteAppreciate you bringing this to our attention. This virus has been picked up by global intelligence as potential virus, first seen 04/11/2015 at 2:23am. Before whitelisting this file, we've requested an investigation into the legitimacy of this threat.

Someone is convinced its a virus.

StarGeek

#4
November 05, 2015, 09:21:48 PM
Have you tried downloading it off of SourceForge.

"It didn't work" isn't helpful. What was the exact command used and the output.
Read FAQ #3 and use that cmd
Please use the Code button for exiftool output

Please include your OS/Exiftool version/filetype

Phil Harvey

#5
November 06, 2015, 07:22:28 AM
Norton has a grudge against ExifTool for no good reason.  See this post.  I wonder if this is the problem.

- Phil
...where DIR is the name of a directory/folder containing the images.  On Mac/Linux/PowerShell, use single quotes (') instead of double quotes (") around arguments containing a dollar sign ($).

ajft

#6
November 09, 2015, 06:28:51 PM
A short message has come through from our security staff "This has now been marked as safe." and now I can download 10.04 and 10.05.  sha1sum says that 10.04 is the same as the file that was being detected as bad a week ago.

False positive.

Phil Harvey

#7
November 10, 2015, 07:35:20 AM
Thanks for the update.

- Phil
...where DIR is the name of a directory/folder containing the images.  On Mac/Linux/PowerShell, use single quotes (') instead of double quotes (") around arguments containing a dollar sign ($).
Print
Go Up Pages1
User actions