<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>It was through Mozilla Firefox though, so it might behave
      differently on different browsers.<br>
    </p>
    <div class="moz-cite-prefix">On 24/02/2021 07:28, J. Gareth Moreton
      via fpc-devel wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:3d25d396-56f2-b753-1e5d-77bffd5c56e8@moreton-family.com">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <p>I tried to download the file but the link had me download an
        installer for the file instead, which installed malware.</p>
      <p>Gareth aka. Kit<br>
      </p>
      <div class="moz-cite-prefix">On 24/02/2021 07:25, Michael Van
        Canneyt via fpc-devel wrote:<br>
      </div>
      <blockquote type="cite"
        cite="mid:alpine.DEB.2.22.394.2102240823300.355867@home"> <br>
        Gareth, <br>
        <br>
        I don't know what you've been doing on that site, but I
        downloaded the bugreport <br>
        file without problems. I didn't have to install anything, just
        downloaded a <br>
        zip without the need to download or install anything else. The
        zip file <br>
        contains only (a lot of) pascal files. <br>
        <br>
        I agree the method is somewhat unusual but as far as I can see
        the download <br>
        is bona fide. <br>
        <br>
        Michael. <br>
        <br>
        <br>
        On Wed, 24 Feb 2021, J. Gareth Moreton wrote: <br>
        <br>
        <blockquote type="cite">A follow-up.  I did some research on one
          of the 3rd party tools that was installed... IdleBuddy.  IT IS
          MALWARE.  Specifically it is a crypto miner (one that uses
          your resources and gives the credit to someone else). <br>
          <br>
          Ironically, I use my laptop for crypto mining, so all my
          hardware resources are in use anyway!  Still, you bet I'm
          going to be giving my laptop a thorough scan now.  Curses. <br>
          <br>
          Gareth aka. Kit <br>
          <br>
          On 24/02/2021 05:54, J. Gareth Moreton via fpc-devel wrote: <br>
          <blockquote type="cite">Hi everyone, <br>
            <br>
            This is a bit of a public service announcement.  I tried to
            look at this bug: <br>
            <br>
            <a class="moz-txt-link-freetext"
              href="https://bugs.freepascal.org/view.php?id=38451"
              moz-do-not-send="true">https://bugs.freepascal.org/view.php?id=38451</a>
            <br>
            <br>
            The poster offered a ZIP download of their project, but it's
            hosted by a questionable site, since it requires browser
            add-ons (including Adobe Flash) and a client program (which
            apparently was digitally signed and recognised by Windows). 
            It installed Opera and a number of 3rd Party Windows
            Services without permission. I've managed to uninstall said
            programs, and now I'm running a full virus scan because,
            frankly, I don't trust everything to be gone. <br>
            <br>
            I made a post on the bug report suggesting the author use a
            different download provider.  But long story short, DO NOT
            DOWNLOAD FROM THE LINK PROVIDED. <br>
            <br>
            Gareth aka. Kit <br>
            <br>
            <br>
          </blockquote>
          <br>
          -- <br>
          This email has been checked for viruses by Avast antivirus
          software. <br>
          <a class="moz-txt-link-freetext"
            href="https://www.avast.com/antivirus"
            moz-do-not-send="true">https://www.avast.com/antivirus</a> <br>
          <br>
          _______________________________________________ <br>
          core site list <br>
          <a class="moz-txt-link-abbreviated"
            href="mailto:core@freepascal.org" moz-do-not-send="true">core@freepascal.org</a>
          <br>
          <a class="moz-txt-link-freetext"
            href="https://idefix.freepascal.org/cgi-bin/mailman/listinfo/core"
            moz-do-not-send="true">https://idefix.freepascal.org/cgi-bin/mailman/listinfo/core</a>
          <br>
          <br>
        </blockquote>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <pre class="moz-quote-pre" wrap="">_______________________________________________
fpc-devel maillist  -  <a class="moz-txt-link-abbreviated" href="mailto:fpc-devel@lists.freepascal.org" moz-do-not-send="true">fpc-devel@lists.freepascal.org</a>
<a class="moz-txt-link-freetext" href="https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel" moz-do-not-send="true">https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel</a>
</pre>
      </blockquote>
      <div id="DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br>
        <table style="border-top: 1px solid #D3D4DE;">
          <tbody>
            <tr>
              <td style="width: 55px; padding-top: 13px;"><a
href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient"
                  target="_blank" moz-do-not-send="true"><img
src="https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif"
                    alt="" style="width: 46px; height: 29px;"
                    moz-do-not-send="true" width="46" height="29"></a></td>
              <td style="width: 470px; padding-top: 12px; color:
                #41424e; font-size: 13px; font-family: Arial, Helvetica,
                sans-serif; line-height: 18px;">Virus-free. <a
href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient"
                  target="_blank" style="color: #4453ea;"
                  moz-do-not-send="true">www.avast.com</a> </td>
            </tr>
          </tbody>
        </table>
        <a href="#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width="1"
          height="1" moz-do-not-send="true"> </a></div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
fpc-devel maillist  -  <a class="moz-txt-link-abbreviated" href="mailto:fpc-devel@lists.freepascal.org">fpc-devel@lists.freepascal.org</a>
<a class="moz-txt-link-freetext" href="https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel">https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel</a>
</pre>
    </blockquote>
  </body>
</html>