GIMP 299.10 virus alert during installation

[Wilvand]

Ik downloaded GIMP.299.10 from the direct link on the GIMP.org site.
Installation on my Windows 10 system, Avast antivirus blocked the installation with following alerts
- Smime3.dll
- mss3.dll
- msutil3.dll
- libnspr4.dll
Infected with Win32:malOb-U(Cryp) malware.
Researching, i learned this virus is a major menace to the operating system.I tried tot report this to GIMP.org but couldn't get a working account on gnome gitlab.
Can someone check what's happening
Thanks

[PixLab]

If you downloaded from https://gimp.org you're safe!
Thus from that URI, It's not because your pseudo anti virus detected code that pirates or bad people can use or part of it to make virus (not hackers, I do make the difference) that GIMP has virus, it's not because your anti-virus--company (where the company never, ever check the open source code) is just f$%^&ng lasy that GIMP has virus in it.

if you believe your antivirus reading few freaking code line which does not make any differences between a good app and bad app more than me, DO NOT install GIMP and search for something else!
Same thing for the plugin G'MIC from https://gmic.eu

In the end my recommendation... Uninstall your anti-virus, I was on windows for more than 15 years 3.x/1994 to 2010, without antivirus, I never got one virus (um.. not exactly I voluntarily downloaded few of them to study them)

[rich2005]

Very occasionally the developers get a report like yours. example: https://gitlab.gnome.org/GNOME/gimp/-/issues/6941 and they will say, run the file(s) through VirusTotal which scans using multiple virus engines.

This using the latest gimp-2.99.10-setup-2.exe installer
Using linux to extract the files, so no possibility of a Windows Malware compromise.
There are two sets in a 64 bit Windows installation, both 64 and 32 bit
Nothing shows here. A couple of screenshots 64bit https://i.imgur.com/KirXJ0z.jpg and 32 bit https://i.imgur.com/9Wgb4eI.jpg

Most probably a false positive or it could be something already on your computer.
Try running the 32 bit files yourself through VirusTotal https://www.virustotal.com/gui/home/upload

[programmer_ceds]

(03-28-2022, 12:16 PM)Wilvand Wrote: Ik downloaded GIMP.299.10 from the direct link on the GIMP.org site.
Installation on my Windows 10 system, Avast antivirus blocked the installation with following alerts
- Smime3.dll
- mss3.dll
- msutil3.dll
- libnspr4.dll
Infected with Win32:malOb-U(Cryp) malware.
Researching, i learned this virus is a major menace to the operating system.I tried tot report this to GIMP.org but couldn't get a working account on gnome gitlab.
Can someone check what's happening
Thanks

In the days when I used Windows the AV software that I used had the option of sending the AV company the file that was causing the problem - I did this a number of times and in every case, within a day or so, the AV program would stop reporting the issue as it (the AV program) had been corrected.

In most cases the issue is just that the program that is being flagged as being infected just happens to contain a pattern of bytes that is the same as the pattern that the AV software uses to recognise a particular item of malware.

You would almost certainly be right to complain to the AV company and not to GIMP.