Trojan / Malware on download link
#1
Hi, Just this morning tried to download RC4 this pops up win windows defender. I have a screenshot locally on my device.

Thanks.

Trojan:Win32/Gaobot

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Items:
file:C:\Users\Acer-PC\Downloads\kodi-17.0-Krypton_rc4.exe.part
Reply
#2
no virus detected on my downloaded file ... kodi-17.0-Krypton_rc4.exe

dunno why you have .part on yours ?
Reply
#3
got the same warning from Windows defender, but it's a false positive. It seems that some byte sequence in this particular build seems to match the trojan pattern. I tested different mirrors to rule out it's an infected mirror and also tested our latest nightly builds to rule out it's an infected build slave.
Reply
#4
btw, if you don't trust this build you can also just download the latest Krypton nightly which is nothing else than RC4 with probably some additional bugfixes http://mirrors.xbmc.org/nightlies/win32/Krypton/
Reply
#5
@SeVreN2013,

I actually got the warning twice, once on the .part and once when the full download had completed and Windows ammended the .part to a .exe

@da-anda

Thanks for confirming a false positive!
Reply

Logout Mark Read Team Forum Stats Members Help
Trojan / Malware on download link0