Scribusoid

Author Topic: Couldn't download Scribus because of Trojan  (Read 994 times)

dashley

  • Newbie
  • *
  • Posts: 2
  • Karma: 0
  • Scribus User
Couldn't download Scribus because of Trojan
« on: April 26, 2016, 03:24:10 am »
I really want to use Scribus, but my Kaspersky Internet security blocked the download because it was trying to load a Trojan along with the software -- has anyone else encountered this problem, and is there anything I can do about it?

solaero

  • Newbie
  • *
  • Posts: 31
  • Karma: 0
  • Scribus Moonlighter
Re: Couldn't download Scribus because of Trojan
« Reply #1 on: April 26, 2016, 03:59:58 am »
Which one are you downloading and are you getting it through scribus.net and their link that takes you to Sourceforge?

I just realized there's no checksums, but there is a PGP signature in the directory. Anyone know why there's no MD5 checksums? (or am I blatantly missing it?)

Nermander

  • Hero Member
  • *****
  • Posts: 1133
  • Karma: 15
Re: Couldn't download Scribus because of Trojan
« Reply #2 on: April 26, 2016, 09:58:45 am »
There are Sha1 and Sha256 checksums in the release notes.

For example https://wiki.scribus.net/canvas/1.5.1_Release

GarryP

  • Hero Member
  • *****
  • Posts: 1353
  • Karma: 20
  • Scribus User
Re: Couldn't download Scribus because of Trojan
« Reply #3 on: April 26, 2016, 04:50:46 pm »
If you're downloading from SourceForge - the official download site - you can get checksums by pressing the little (i) icon to the right of the filename (after the little graph). See attached picture.

dashley

  • Newbie
  • *
  • Posts: 2
  • Karma: 0
  • Scribus User
Re: Couldn't download Scribus because of Trojan
« Reply #4 on: May 03, 2016, 08:26:27 pm »
Which one are you downloading and are you getting it through scribus.net and their link that takes you to Sourceforge?

I just realized there's no checksums, but there is a PGP signature in the directory. Anyone know why there's no MD5 checksums? (or am I blatantly missing it?)

I used SourceForge to download Scribus, but now it's asking me to download Ghostscript, and one person commented that Ghostscript comes with a lot of nonsense, like games, etc.  It was a free download. Is there a way to get Ghostscript without all the nonsense extras that accompany it? Also, does Ghostscript have a cost?
« Last Edit: May 03, 2016, 11:03:43 pm by dashley »

solaero

  • Newbie
  • *
  • Posts: 31
  • Karma: 0
  • Scribus Moonlighter
Re: Couldn't download Scribus because of Trojan
« Reply #5 on: May 04, 2016, 05:57:02 am »
I'm pretty sure there are no games included with Ghostscript. There were none when I installed it on my Mac anyway.

Nermander

  • Hero Member
  • *****
  • Posts: 1133
  • Karma: 15
Re: Couldn't download Scribus because of Trojan
« Reply #6 on: May 04, 2016, 10:36:32 am »
An Scribus is not asking you to install Ghostscript. It tells you it can not find Ghostscript and that some features are not available without Ghostscript. For most users those features are not critical, so you can start using Scribus without Ghostscript.

GarryP

  • Hero Member
  • *****
  • Posts: 1353
  • Karma: 20
  • Scribus User
Re: Couldn't download Scribus because of Trojan
« Reply #7 on: May 04, 2016, 10:54:20 am »
When downloading software it is very important to download from an official site.

If you get the software from the people who make it then you can be sure - as much as you can be sure of anything - that you're getting the "pure" version without adverts/malware/etc. Basically, the people who put so much time and effort into making the software don't want you to have a bad experience with it so they'll give you a nice clean copy.

There are certain exceptions to this "get it from the source" rule - for example, Partha's Place offers some different GIMP packages - but, for the most part, if in doubt get the software from the people who make it. Why bother going to the trouble of getting it from elsewhere?

In the case of Scribus, you should go to https://www.scribus.net/ and follow the links to wherever the site says you can download it from - which is currently SourceForge. (If you want the 64-bit version you may need to look at the list of versions available as your browser might not choose the right one automatically.)

In the case of GhostScript, for Windows and Linux you can get it from http://ghostscript.com/ and follow the links as appropriate. (The version you probably want - unless you have specific needs - is the "Postscript and PDF interpreter/renderer" under the "GNU Affero General Public License".) For Mac you can get it from http://pages.uoregon.edu/koch/ where you just need to choose the latest version.

I hope this has helped. (If everything works okay it would be great if you can say as much here so that people reading this can be more confident in following the same path.)

On the other hand, if you are still unsure of what to do, or have any other problems, please don't hesitate to speak up.