I recently downloaded the latest Deepin distro, and scanning it with Bitdefender I was notified there were 12 password protected files the exe could not check.

I'm not familiar enough with such things to know if this is normal, or if the distro has files in it which I would not want having access to my system.

Can someone tell me what this is for, and if I'm at risk.

Thanks,

Bob

While I think they may be false positives posting the full scan report would be a start.

Holding down my cursor for a print screen takes off the reveal of the full line in the Object Path, but perhaps you can tell something from the attached JPG.

I also thought it might be a false positive, but since this came from China, I want to be safe rather than sorry.

All the files begin with this prefix, with differing endings:
=>casper=>initrd.lz=>gzip)=>lib=>firmware=>vxge=>X3fw.ncf=>T1:X3_101025_1_8_1_*

Attached Thumbnails

 

I'd suspect it isn't really that but a compressed file. A long way around would be to remove them if you are worried.

If you got this distro from the proper mirrors and you tested it by md5 or shal then it should be OK.

It's almost impossible that a virus can run between linux and windows but it can happen.

Those files are part of kernel files https://www.suse.com/LinuxPackages/p...ernel-firmware


Others have noticed this. http://ubuntuforums.org/showthread.php?t=2129803

I would say if the md5 (or sha1) of what you have matches those on the Deepin website then ignore the warnings entirely.
Whether you trust the people at Deepin or not they would have to be practically brain-dead to hide something in a way almost guaranteed to set of virus scan alerts when they could just compile spyware directly into the kernel or anywhere else they see fit since it's their distribution.
So, either you trust the people who made the distribution or you don't -- the virus scan is irrelevant. Using a virus scanner on a live CD is pointless and counter productive. Use the sha1 or md5 or both and if they don't match don't burn the image to bootable media but simply delete it, if they do match then there is no problem.

I'm not familiar with the md5 and sha1 commands, but I'll find out how to use them and do the check. And the point is well made that it would not wise to allow a distribution out that contains malicious code.

As you note, I'm a newbie and not familiar with Linux. Even though I first looked into it a couple of years back, I've not yet ventured into its use, but the demise of XP is probably driving a lot of folks to look for a good alternative.

Thanks for all your help here,

Bob