Sublime Forum

Virus in a package

#1

Hi. I have been scanning my system with antivirus (AVZ) and it, somehow, came up with a virus in “Diff” package of Sublime.
"C:\Program Files\Sublime Text 2\Pristine Packages\Diff.sublime-package/{ZIP}/Context.sublime-menu >>>>> Trojan.BAT.Starter.k"
This is the message.

0 Likes
#2

My Guess - false positive due to faulty pattern recognition.
Since when do you have ST2, and in special that package, installed?
Since when do you have that AV installed?

0 Likes
#3

That package comes preinstalled with official setup file. Antivirus always finds that virus, no matter which computer Sublime is installed on. And i had my “D” drive formatted 2 times, probably because of that virus.

0 Likes
#4

This is the exact content of the Context.sublime-menu file found into Diff’s pristine package (ST 2.0.2 portable x64bit that i used before switching to st3):


	{ "caption": "-" },
	{ "caption": "Show Unsaved Changes…", "command": "diff_changes" }
]

and this is from a freshly downloaded x32bit version (2.0.2 build 2221) that i just installed to check:


	{ "caption": "-" },
	{ "caption": "Show Unsaved Changes…", "command": "diff_changes" }
]

I really think your av is giving you a false positive like mbajohr said…

0 Likes