Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: kinghajj on June 14, 2011, 11:11:55 AM



Title: Bitcoin Trojan/Virus in the wild? EDIT: No, at least not yet.
Post by: kinghajj on June 14, 2011, 11:11:55 AM
I just checked buttcoin.org to see if any more rage-inducing comments were posted, and found a link (http://www.threatexpert.com/report.aspx?md5=74e7862a05a7166d2f22dbb74f4025db (http://www.threatexpert.com/report.aspx?md5=74e7862a05a7166d2f22dbb74f4025db)) claimed to be some sort of trojan report. I'm skeptical, because it seems that the program in question, "sample_1.exe", is merely creating Bitcoin-related files and registry entries, and not reading nor changing them. Is this program part of the install process?


Title: Re: Bitcoin Trojan/Virus in the wild?
Post by: cuddlefish on June 14, 2011, 11:15:44 AM
I just checked buttcoin.org to see if any more rage-inducing comments were posted, and found a link (http://www.threatexpert.com/report.aspx?md5=74e7862a05a7166d2f22dbb74f4025db (http://www.threatexpert.com/report.aspx?md5=74e7862a05a7166d2f22dbb74f4025db)) claimed to be some sort of trojan report. I'm skeptical, because it seems that the program in question, "sample_1.exe", is merely creating Bitcoin-related files and registry entries, and not reading nor changing them. Is this program part of the install process?

That's stock bitcoind!


Title: Re: Bitcoin Trojan/Virus in the wild?
Post by: AntiVigilante on June 14, 2011, 11:20:17 AM
Nope. That's an attempt at associating any bitcoin release with malware. Any AV system that picks up that behavior will say the bitcoin process is malware.

Also it is a way to distribute illicit funds to botnets thereby making confiscation difficult.

In the best case it's a means to commit fraud.

In the worst case it's an attempt at slandering the whole community.