Re: PostgreSQL\12\bin\pg_ctl.exe - Trojan detected

On Sun, Dec 22, 2019 at 4:26 PM Manoj Agrawal <manoj(dot)agrawal(at)hotmail(dot)com>
wrote:

> Dear PostgreSQL Team,
>
> I am a regular ordinary user of your application.
> I apologies for not following your bug and security template. I suppose
> this will be OK with you.
>
> Kindly look at this screen from Windows 10 machine.
>
> I have downloaded "postgresql-12.1-3-windows-x64.exe" from your website
> and during installation it is reporting Malware in one of your executable.
>

Exactly which URL did you download it from? And please provide a checksum
(md5, sha1 or similar) of the file downloaded to your system.

>
> *PostgreSQL\12\bin\pg_ctl.exe*
>
> *Threat detected: Trojan:Win32/Detplock *
>
> *Alert level: Severe *
>
> *Date: 22-12-2019 07:32 PM *
>
> *Category: Trojan *
>
> *Details: This program is dangerous and executes commands from an
> attacker. *
>
> I need you to look into this on priority basis. As I am stuck-up
>

Hi!

Can you please take the file from your system and upload it to
https://www.virustotal.com/gui/home/upload, and let us know what the
detection there says? It also gives you a link to the finished analysis,
so please post the link to that one as well.

//Magnus