Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
Today I found a GPLed project on SourceForge whose executables are spreading a virus. This fact has been pointed out several times in reviews of the project and the infected executable is still available for download. Apparently, older executables are not infected, so the project itself does not seem to be made with malicious purpose in mind. There is no preferred way to contact developers and forums for the project are dead. What should I do?
share|improve this question
This question is on topic, but in the future, if you want to ask if a question is on-topic, please use the meta site – user8 Sep 13 '10 at 16:52
Why wait before contacting SourceForge directly? Verify if it's a virus, then contact them right away. – Peter Boughton Sep 13 '10 at 17:56
Your edits made this question off topic / too localized. Programmers.SE is for subjective or extended discussion about topics concerning the majority of programmers, not for diagnosing virus scans. – user8 Sep 13 '10 at 22:26
@Mark Trapp Yeah, I was thinking how to split this into two parts, one for general case and one for this specific case. The second part can be considered off-topic. – AndrejaKo Sep 13 '10 at 22:32
up vote 21 down vote accepted

If you can't get in touch with the developers, then contact SourceForge. Report the problem, give them detailed information they can use to verify the issue, and they'll (probably) take it down. They're a reputable site and I imagine they wouldn't want to be associated with malware.

share|improve this answer

I would start by sending an email to the project maintainer and developers.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.