VLC Win32 binary is infected with Troj/Momma-B virus

[Samuel Hocevar]

On Thu, Jun 06, 2002, Sam Hart wrote:

> Note that this isn't the VLC binary itself, just the Installer (which is 
> the Nullsoft NSIS installer, if I'm not mistaken) that's infected with the 
> Trojan. I'm assuming where-ever it's ultimately packaged is a Win32 
> machine, and that's where the virus is coming from.

   The final packaging is done on the same Linux box (mknsis is called
using Wine). The NSIS tools haven't changed since Feb 7th. McAfee says
the trojan installs a copy of mIRC, there's simply not enough room for
it in the vlc installer. And they say it requires the Visual Basic 6
runtime to work, which I never installed anyway.

> Also note that this is a fairly new Trojan. Sophos announced an IDE for it 
> on May 21st (so, less than two weeks ago).

   I'd say Sophos is smoking stuff.

-- 
Sam.

-- 
This is the vlc-devel mailing-list, see http://www.videolan.org/vlc/
To unsubscribe, please read http://www.videolan.org/lists.html
If you are in trouble, please contact <postmaster at videolan.org>