Feedback

[Brendan Coupe]

I am not a developer for KMM but I will try to help the best I can since
the developers are extremely busy dealing with bugs in KMM version 5.

I think the most important question that needs to be answered is if the
virus warning is being caused by a legitimate program element in KMM (false
positive) or if it was included by someone outside of the KMM development
team when they packaged KMM (on purpose or not). It may also be possible
that some other malware on your system attached itself to the KMM exe file.
Have you had any other malware issues on this PC?

In your updated bug report I believe you said you do not know where you got
the setup program for KMM. Do you still have the setup program and if you
do, have you tried running Windows Defender on the setup file to see if it
finds the Trojan in it (right click on the setup program and choose scan
with windows defender)?

I normally compile KMM from source on my Linux computers so I have never
installed the Windows version until today. I found the setup program for
KMM 4.8.1.1 here:

https://download.kde.org/stable/kmymoney/4.8.1.1/

I scanned it for malware with Windows Defender on my Windows 10 VM before
installing it. After installing it I scanned the Program Files folder that
it created with Windows Defender. In both cases it came back clean. I ran
the program without any problems.

I suggest you uninstall the existing KMM on you system. Then make sure
Windows Defender is up to date. Download the KMM setup program from the
above link and scan it with Windows Defender. Then install it and scan the
Program Files folder for viruses. Run KMM and report back if you are
successful or if you run into any problems.

I tried this with both the 32 bit and the 64 bit versions of KMM with no
problems. For some reason the 64 bit version was installed in
the C:\Program Files (x86) folder. I also installed the 32 bit version on
an old Windows XP VM and scanned it with Security Essentials. Again no
issues found. This suggests to me that either you had an infected setup
program or Windows Defender definitions caused a false positive and the
definitions have been updated since then to eliminate this false positive.





*----Brendan Coupe*

On Mon, Mar 12, 2018 at 7:29 PM, Rod Nelson <ranels at shaw.ca> wrote:

> Hi… I have been using kmymoney ver. 4.8.1.1
>
>
>
> This morning I tried to open it and windows defender found a Trojan virus
> in it… [*Bug 391764* <https://bugs.kde.org/show_bug.cgi?id=391764>
> *- Trojan:Win32/Azden.B!cl *
>
> The result was that my desktop shortcut was gone, not sure what else.
>
> I do not know how to run kmymoney now.
>
> I found my "Rod.mny" file, but do not know the application it is
> associated with.
>
> Can you advise me what I should do?
>
>
>
> Thank you,
>
> Rod Nelson
>
> 22132 126 Ave
>
> Maple Ridge BC
>
> V2X 0V8
>
> 604 463-6667 <(604)%20463-6667>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kmymoney-devel/attachments/20180313/02c1dcd6/attachment.html>