Jump to content

Clover update r4318 being detected as Osx.Malware.Proton

Clover

  • Please log in to reply
9 replies to this topic

#1
muffinbacon

muffinbacon

    InsanelyMac Protégé

  • Members
  • Pip
  • 1 posts

ClamAV is finding Osx.Malware.Proton-6377366-1 in the file Clover_v2.4k_r4318.pkg/CloverPrefpane.pkg/Payload

 

The extracted content of the Payload file isn't detected as anything, though. Is this just a false-positive? I downloaded it directly from their SourceForge page via the update dialog.

 

Sorry if this is the wrong place to post this.



#2
STLVNUB

STLVNUB

    InsanelyMac Legend

  • Coders
  • 1,414 posts
  • Gender:Male

Don't install from here. errors out. Both built one and downloaded one. weird



#3
Slice

Slice

    InsanelyMac V.I.P.

  • Local Moderators
  • 6,628 posts
  • Gender:Male
  • Location:Moscow

Hackintosh OS is a dangerous malware that is able to destroy your computer.

And Clover is a biggest virus in the world!



#4
Badruzeus

Badruzeus

    InsanelyMac Legend

  • Members
  • PipPipPipPipPipPipPip
  • 634 posts
  • Gender:Male
  • Location:Indonesia
  • Interests:Graphics Design.

Hackintosh OS is a dangerous malware that is able to destroy your computer.

And Clover is a biggest virus in the world!

The most beautiful virus in the world!  :hysterical: LoL



#5
STLVNUB

STLVNUB

    InsanelyMac Legend

  • Coders
  • 1,414 posts
  • Gender:Male

Not as funny as it sounds, it could be true...



#6
iWin32

iWin32

    InsanelyMac Geek

  • Members
  • PipPipPip
  • 114 posts
  • Gender:Male

Slice, in all seriousness, is there a chance that your Clover development branch or something could have been compromised?  If this isn't a false positive, it is a serious issue.  Proton is a RAT trojan for macOS.  And I'm sure you're all familiar with the time Transmission's (the BitTorrent Client) site was compromised and was used to deliver Ransomware to macOS users who downloaded a compromised version of the software.  If not, then it's a false positive.  And to be fair, VirusTotal only shows that one AV showing Clover as infected.

 

But as to Clover itself, I can assure that it is 100% malware free under usual circumstances.  I've used it countless times before, and I'd even recommend that over Chameleon for BIOS-based computers.



#7
Slice

Slice

    InsanelyMac V.I.P.

  • Local Moderators
  • 6,628 posts
  • Gender:Male
  • Location:Moscow

Clover is open source. If someone doubt then he can compile the Clover by himself. He can also scan sources.

But I don't know what they mean "malware". Clover will change boot sector as a virus. 



#8
Derty

Derty

    InsanelyMacaholic

  • Donators
  • 3,405 posts
  • Gender:Male

https://blog.malware...-strikes-again/

 

well i´m clean...



#9
chris1111

chris1111

    Packager

  • Donators
  • 4,499 posts
  • Gender:Male
  • Location:Montreal Canada
  • Interests:Mac OS X Packaging / scripts

CloverPrefpane.pkg don't have a virus ➦ VirusTotal Scan

No file in Clover have a virus Complet Scan ➦ Clover Package



#10
magnifico

magnifico

    The Special One

  • Donators
  • 3,518 posts
  • Gender:Male

 

And Clover is a biggest virus in the world!

:wallbash:  :wallbash:  :wallbash:

 

now I understand why I became a crazy man, Clover was the problem of my brain, I remember that these symptoms came from revision 230 ... Sergey could tell me that you could become crazy








0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

© 2017 InsanelyMac  |   News  |   Forum  |   Downloads  |   OSx86 Wiki  |   Designed by Ed Gain  |   Logo by irfan  |   Privacy Policy