Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Virus Detected! #21829

Closed
kvigor opened this issue Mar 19, 2021 · 3 comments
Closed

Virus Detected! #21829

kvigor opened this issue Mar 19, 2021 · 3 comments
Assignees
Labels

Comments

@kvigor
Copy link

kvigor commented Mar 19, 2021

My threat protection found this virus"Heur.BZC.PZQ.Boxter.811.B3A056E7"embedded in this file/or exploited this file AspNetCore.Docs/aspnetcore/blazor/host-and-deploy/webassembly/_samples/integrity.ps1

I'd recommend researching this issue.

@guardrex
Copy link
Collaborator

guardrex commented Mar 19, 2021

Hello @kvigor ...

Please use the This page feedback button and form at the bottom of the English-US topic when opening a new issue. Use of the This page feedback form adds metadata to cross-link the topic to your issue and automatically pings the author.

Capture

WRT the report, it's probably a false positive. The virus checker is using heuristic scanning for that report (note the "Heur" prefix). Heurisitc scanning just goes by patterns, so it's not really reporting a known virus. You'll need to create an exception for that file in your scanner to keep and use the file on your local system.

@guardrex
Copy link
Collaborator

guardrex commented Mar 19, 2021

I'd like to add one more thing about my 'add an exception' recommendation. Just to cover myself, my employer, and Microsoft, we can't know if the file was actually infected in some way after you pulled it down (or even if GitHub has been compromised in some way). Therefore, my guidance on adding an exception for the file to your virus scanner is a ...

💀 Perform at your own RISK! 💀

... recommendation. It's ultimately the dev's responsibility to check the file (e.g., checksum, physical check, etc.) to confirm that a file is faithfully correct to its source when adding scanner exceptions. We assume no responsibility if there really is a virus in your local version of the file. (Ok ... 😄 ... the lawyers should be happy now 😀👍.)

@guardrex
Copy link
Collaborator

One last thing ... there's already a NOTE for Bitdefender at ...

https://docs.microsoft.com/en-us/aspnet/core/blazor/host-and-deploy/webassembly?view=aspnetcore-5.0#troubleshoot-integrity-powershell-script

I'll probably make that more generic when I reach this topic on my UE pass on #19286.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Archived in project
Development

No branches or pull requests

3 participants