gpg-error.exe Win64:Evo-gen [Susp]

Viruses and worms
1

Hi, gpg-error.exe (libgpg-error-devel: GnuPG error code library) is from Cygwin. Avast is moving it to Virus Chest?

https://www.virustotal.com/latest-scan/dbded6ef8542ac0de23af6a363e68d9bc52f51bc1caf954235904e3aac68cbf2

Edit. Added File path: C:\cygwin64\bin

2

Hi k3nny,

I fear it is a FP, re: http://www.herdprotect.com/gpg-error.exe-128bf1a77d5dd510f1605c9eec78c45d2662ddc1.aspx
fileinformatie:

process: unknown Product
rights: Unknown Company

is part of: unknown Product

size: 88790.00 Bytes

product version: Unknown Version

date added: 29/4/2013 00:00:00

MD5: 7B2677294CD92021FCE382E8A476637E

path: e: \Program Files \gnucash \bin \

You should not interpret the return code. 0 is success all other values indicate a failure. 2 is usually used for unxpected errors and 1 for things like a BAD signature. The proper way to identify an error is by interpreting the output of --status-fd.

See also www.winpt.org for a nice COM+ component which can be used
directly from VBscript and friends.

Quote from Werner Koch

Fix it by writing:

  $cmd = "/usr/bin/gpg -a --recipient $to -e -o $outfile $infile --homedir /path/to/dir";

Also consider: https://gist.github.com/dajoen/8094203

polonus

3

Hello all,

the false positive has been fixed. It will come into effect in the next virus database update.

Sorry for the inconvenience.