v2.93 - Trojan:OSX/KeRanger.B

Ask for help and report issues with the Mac OS X version of Transmission
Post Reply
boonub
Posts: 3
Joined: Thu Feb 22, 2018 6:36 pm

v2.93 - Trojan:OSX/KeRanger.B

Post by boonub »

Hi,

I have downloaded the latest version from your website, but when I try to open - F-Secure antiVirus is removing the Sparkle framework, as it detects it as a Trojan.
I thought this issue was resolved a while back - has it re-occurred???
2018-02-22_18-41-05.png
2018-02-22_18-41-05.png (106.55 KiB) Viewed 35892 times
Thanks,
mike.dld
Transmission Developer
Posts: 306
Joined: Wed Dec 25, 2013 10:56 pm

Re: v2.93 - Trojan:OSX/KeRanger.B

Post by mike.dld »

There's a SHA256 link to VirusTotal site where you can see that Mac DMG was checked by F-Secure yesterday (20180221) and it found nothing wrong with it: https://www.virustotal.com/en/file/61cd ... /analysis/.

I also can't find any information on "OSX/KeRanger.B" using DuckDuckGo, Google, and Bing.

Would be great if you could report this to F-Secure and ask for clarification.
mike.dld
Transmission Developer
Posts: 306
Joined: Wed Dec 25, 2013 10:56 pm

Re: v2.93 - Trojan:OSX/KeRanger.B

Post by mike.dld »

I can't even find OSX/KeRanger.A, let alone OSX/KeRanger.B, in their database: https://www.f-secure.com/en/web/labs_gl ... ions-index :(
tranghesea
Posts: 1
Joined: Fri Feb 23, 2018 3:05 am

Re: v2.93 - Trojan:OSX/KeRanger.B

Post by tranghesea »

What ever happened to my current version? It said t detected a virus and deleted it. When I try to download the newest version my computer says its damaged and wont let me open it. Whtas up
livings124
Transmission Developer
Posts: 3142
Joined: Fri Jan 13, 2006 8:08 pm

Re: v2.93 - Trojan:OSX/KeRanger.B

Post by livings124 »

I've reached out to F-Secure for clarification. The file modification times for the first two files in that image are for versions 2.92 and 2.93, which doesn't make sense to me.
boonub
Posts: 3
Joined: Thu Feb 22, 2018 6:36 pm

Re: v2.93 - Trojan:OSX/KeRanger.B

Post by boonub »

livings124 wrote:I've reached out to F-Secure for clarification. The file modification times for the first two files in that image are for versions 2.92 and 2.93, which doesn't make sense to me.
You are correct - v2.92 was working fine, then all of sudden when I opened it - F-Secure detected the framework as a trojan. I then downloaded the latest v2.93 - which had the same issue - And I even downloaded the latest nightly build from Feb 10 - Same issue - V.strange!
livings124
Transmission Developer
Posts: 3142
Joined: Fri Jan 13, 2006 8:08 pm

Re: v2.93 - Trojan:OSX/KeRanger.B

Post by livings124 »

Thanks for reporting this. I have reached out to F-Secure and they have confirmed that this is a false positive and will be resolving this in an upcoming database update.
boonub
Posts: 3
Joined: Thu Feb 22, 2018 6:36 pm

Re: v2.93 - Trojan:OSX/KeRanger.B

Post by boonub »

Perfect thanks, I also got a response from them - they also confirm that it was probably a false positive..
Here's the reference to the trojan anyway -
https://en.wikipedia.org/wiki/KeRanger
Post Reply