Tenfourbird malware alert

• 回報者: (匿名)
• 負責人: t_mrc-ct
• 類型: 支援請求
• 狀態: 開啟 [Owner assigned]
• 元件: Tenfourbird
• 里程碑: (無)
• 優先權: 7
• 嚴重程度: 8
• 處理結果: Won't Fix
• 檔案: 無

細節 回覆

Just wanted to let you know that the last time I tested Tenfourbird, I found a couple of malware alerts detected by AegisLab and TrendMicro.

You can find the analysis results for Tenfourbird 3.7.0 at

https://www.virustotal.com/en/file/f73d024c8a579059d9b7559b68082dd054e4ab2a7cb39d3e1294763327310519/analysis/

Seeing that AegisLab and TrendMicro are the only anti-malware solutions that found a problem with Tenfourbird, I think that these are false positives, and you should be able to solve the problem by getting in touch with AegisLab and TrendMicro’s development teams.

Ticket History (2/2 Histories)

2016-03-25 18:30 Updated by: None

• New Ticket "Tenfourbird malware alert" created

2016-03-28 01:03 Updated by: t_mrc-ct

• 優先權 Update from 9 - 最高 to 7
• 嚴重程度 Update from 9 - 最高 to 8
• 處理結果 Update from 無 to Won't Fix

評語 回覆

Thank you for your reporting and testing.

I figure out that these 3 files are detected as malware.

virustotal: calDavCalendar.js

• repository: comm-esr38/calendar/providers/caldav/calDavCalendar.js
• app file: Tenfourbird.app/Contents/Resources/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df1933103}/components/calDavCalendar.js

virustotal: gdataSession.jsm

• repository: comm-esr38/calendar/providers/gdata/modules/gdataSession.jsm
• app file: Tenfourbird.app/Contents/Resources/extensions/{a62ef8ec-5fdc-40c2-873c-223b8a6925cc}/modules/gdataSession.jsm

virustotal: nsBox.js

• repository: comm-esr38/mail/components/cloudfile/nsBox.js
• app file: Tenfourbird.app/Contents/Resources/components/nsBox.js

But these files are not modified in Tenfourbird. In comm repository on Mozilla, these are not updated at lease 6 months ago. So I think these are safe.

I also reported this issue to AegisLab and TrendMicro.

Regards.