[texworks] message from TeXworks user

[Jens Heber]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear TeXworks team,

I would like to ask for your advice concerning the following security
issue.

Yesterday I installed TeXLive 2009 for Windows XP via internet (using
install-tl.zip from http://www.tug.org/texlive/acquire-netinstall.html)
and thus came into contact with TeXworks for the first time.

Unfortunately, my "Sophos" antivirus software claims that three files
are virus/spyware of a category called "Mal/Dorf-I" (cf.
http://www.sophos.com/security/analyses/viruses-and-spyware/maldorfi.html).
The "suspicious" MS DOS-exe-files have been put under quarantine by Sophos.

These files appear to be last modified on 2010/02/28. Are these
original TeXworks files? (I include their MD5-hash code, see below).

texlive\2009\bin\win32
     \dviout.exe   (MD5-hash d132caed244851b1a944221921611235)
     \psv.exe      (MD5-hash 4ea3886315f590856e6d921c54aca0f2)
     \texworks.exe (MD5-hash e9c1687a5375f6ad5b5e76172c46bf37)

I would appreciate any kind of advice or assistance. Thank you very much.

Best regards
Jens Heber

- -- 
Prof. Dr. Jens Heber
Mathematisches Seminar
Christian-Albrechts-Universität zu Kiel
Ludewig-Meyn-Str. 4
D-24098 Kiel
Germany

Phone: +49 (0)431 880 3612
       +49 (0)431 880 1153 (secr.)
Fax:   +49 (0)431 880 4091

PGP-public key: math.uni-kiel.de/geometrie/heber/public.asc
Fingerprint: 64AC 5A8D 97E1 E32F 0FAA 35EA 39E3 2B6A 2EA5 5775

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (MingW32)

iEYEARECAAYFAkuOYgEACgkQOeMrai6lV3XfbwCeM6btYiilIqf7lS67bCN+0vF/
hO4AnA9D95BS3XnYUtEXIMlxv+brjiZb
=bPxJ
-----END PGP SIGNATURE-----