Bitcoin Forum

Bitcoin => Bitcoin Technical Support => Topic started by: User365 on May 04, 2017, 06:28:04 PM



Title: Bitcoin-qt.exe with injected trojan (coinstealer ?)
Post by: User365 on May 04, 2017, 06:28:04 PM
When I submit my bitcoin-qt.exe hash to virustotal, according to Rising I have a coin stealer trojan

https://www.virustotal.com/de/file/e676a1177a02a88a2ae504fd8649e8407c4b688aa4c340dc64d52942c251b8dd/analysis/1483648927/

has anyone of you scanned his file too and got a clean one (so I am infected) or does every Bitcoin qt appear as this ?


Title: Re: Bitcoin-qt.exe with injected trojan (coinstealer ?)
Post by: achow101 on May 04, 2017, 06:49:29 PM
That result is a false positive. Antivirus software will frequently flag bitcoin-qt and bitcoind as viruses. If you have verified that the binaries that you downloaded are legitimate, then there is no problem here.

Antivirus software flag bitcoin-qt and bitcoind as coin stealers and mining viruses because they look for a wallet.dat file (since that is the file it uses for the wallet) and they have mining code (for mining testnet and regtest).


Title: Re: Bitcoin-qt.exe with injected trojan (coinstealer ?)
Post by: User365 on May 04, 2017, 07:39:47 PM
That result is a false positive. Antivirus software will frequently flag bitcoin-qt and bitcoind as viruses. If you have verified that the binaries that you downloaded are legitimate, then there is no problem here.

Antivirus software flag bitcoin-qt and bitcoind as coin stealers and mining viruses because they look for a wallet.dat file (since that is the file it uses for the wallet) and they have mining code (for mining testnet and regtest).

Thank you very much  :)