[tor-bugs] #5689 [Tor bundles/installation]: tor-browser-2.2.35-9_en-US.exe infected?

[Tor Bug Tracker & Wiki]

#5689: tor-browser-2.2.35-9_en-US.exe infected?
-----------------------------------------+----------------------------------
    Reporter:  taylorkh                  |       Owner:  erinn                        
        Type:  defect                    |      Status:  reopened                     
    Priority:  critical                  |   Milestone:  TorBrowserBundle 2.2.x-stable
   Component:  Tor bundles/installation  |     Version:                               
  Resolution:                            |    Keywords:                               
      Parent:                            |      Points:                               
Actualpoints:                            |  
-----------------------------------------+----------------------------------
Changes (by mikeperry):

  * status:  closed => reopened
 * cc: mikeperry (added)
  * resolution:  fixed =>


Comment:

 Did we get a reason from them? Also, it's just F-Secure that updated,
 right? That doesn't make this fixed. The reporter also mentioned
 bitdefender, and commenters mentioned mccaffee.

 Also, has anyone tried scanning a bundle built on a different, fresh
 machine?

 Also, why don't we keep fresh build images or snapshots at the very least?
 If #3688 is out of reach, we should at least be reverting to known clean
 snapshots before each build.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5689#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online