|
Title: AVG claims bitcoin is malware Post by: nvmind on June 28, 2011, 01:02:48 AM Why is AVG antivirus claiming bitcoin is malware and deleting from my pc?
Title: Re: AVG claims bitcoin is malware Post by: JoelKatz on June 28, 2011, 01:03:52 AM The installer? The client? Which version? And what code is it giving you?
Title: Re: AVG claims bitcoin is malware Post by: nvmind on June 28, 2011, 01:52:52 AM The installer? The client? Which version? And what code is it giving you? The client. It seems to be an evolving problem. I first had it happen with 0.032.21 win 32 as soon as I installed it. Since I did not pay much attetnion to where I got it from I deleted it. I then checked that installs were from sourceforge and installed 0.3.22 and had it happen again then I tried 0.3.23rc1 which I had been using upto today. Then I suddenly had it removed by AVG again. I have now tried 0.3.23 win 32 and as yet have had no problem but I suspect I will. http://dktec.biz/files/bitcoinAVG.jpg http://dktec.biz/files/bitcoinAVG2.jpg Title: Re: AVG claims bitcoin is malware Post by: lateminer on June 28, 2011, 05:24:00 AM AVG also detects your cracks and keygens for your pirated software, whats new?
Title: Re: AVG claims bitcoin is malware Post by: Oldminer on June 28, 2011, 05:32:02 AM Use Avira
Title: Re: AVG claims bitcoin is malware Post by: striker11111111 on June 28, 2011, 06:19:29 AM just AVG being aggressive. Protection and convenience are 2 ends of the same teeter totter when it comes to computer safety. You give up one to get the other, inverse correlation.
Title: Re: AVG claims bitcoin is malware Post by: casascius on June 28, 2011, 06:22:01 AM THis probably happens because botnets are probably distributing bitcoin in order to mine on zombie computers... and as a few people find the intrusion and send the unwanted files they found on their machine to AV labs for analysis, it results in bitcoin executables being flagged as malware.
Title: Re: AVG claims bitcoin is malware Post by: casascius on June 28, 2011, 06:22:38 AM AVG also detects your cracks and keygens for your pirated software, whats new? That's because cracks and keygens are trojans, more often than not. Title: Re: AVG claims bitcoin is malware Post by: lateminer on June 28, 2011, 06:56:26 AM Had to find out the hard way? ;D
Title: Re: AVG claims bitcoin is malware Post by: x0Jakeyboy0x on June 28, 2011, 07:42:14 AM I too noticed some funny activities.
It asked permission to connect to 193.107.204.81 upon which my googling led to... Quote --------------------------------------------------------- IP Address = 193.107.204.81 Threat Level = High Threat Category = Malware Controller Threat Description = Malware scan and infect source Hostname = irc.lfnet.org Service Provider = BLOCK FOR PI ASSIGNMENTS Domain Name = IPAPER.COM ASN Number = 50763 ASN Name = MCKAYCOM MCKAYCOM LTD Network Speed = DSL Country CC = UK Country = UNITED KINGDOM Region = - City = - Longitude = -4.47300004959106 Latitude = 54.1500015258789 Zipcode = - TimeZone = +00:00 BestAnswer = 1 --------------- thank you for asking -------------------- Though maybe it doesn't like the idea of IRC. Hmm. Title: Re: AVG claims bitcoin is malware Post by: Gabi on June 28, 2011, 07:47:28 AM Bitcoin client connect to irc to connect to other nodes if i am right
Title: Re: AVG claims bitcoin is malware Post by: BCwinning on June 28, 2011, 07:48:41 AM I ran avg on a win7 box and it didn't flag bitcoin.
Where did you download your source from? Title: Re: AVG claims bitcoin is malware Post by: nvmind on June 28, 2011, 08:02:48 AM I ran avg on a win7 box and it didn't flag bitcoin. http://transact.dl.sourceforge.net/project/bitcoin/Bitcoin/bitcoin-0.3.23/test/bitcoin-0.3.23rc1-win32-setup.exeWhere did you download your source from? Title: Re: AVG claims bitcoin is malware Post by: BCwinning on June 28, 2011, 08:23:00 AM my exe wasn't the rc1, shouldn't matter it's a trusted site.
Title: Re: AVG claims bitcoin is malware Post by: hsf_context on June 28, 2011, 09:29:02 AM Using AVG and so far no problems with Bitcoins.
Title: Re: AVG claims bitcoin is malware Post by: JoelKatz on June 28, 2011, 09:29:53 AM This is heuristic detection based on the code doing a number of things AVG considers suspicious. For one thing, it's receiving a lot of network connections on a port unknown to AVG. The thing that puzzles me though is AVG says it's injecting code. There are a number of legitimate reasons it might do that, but I can't figure out from the source why it would be doing that.
Those not having problems may have heuristic detection off or may have the threshold set higher. Heuristic detection will have a lot of false positives. Title: Re: AVG claims bitcoin is malware Post by: syb3ria on June 28, 2011, 09:52:18 AM I don't know about AVG, but you may check the miner with http://www.virustotal.com/ (http://www.virustotal.com/). Last time i checked, all the AV/malware scanners said it's clear ;)
Title: Re: AVG claims bitcoin is malware Post by: schickel on July 18, 2011, 07:26:19 AM I also had a flag from AVG. This, though, was a flag for a PUP (Potentially Unwanted Program) raised on UfaSoft's bitcoin-miner.exe. I'm assuming this was becuase of distribution by trojans dropping the miner on PCs to generate hashes for the distributer....
Title: Re: AVG claims bitcoin is malware Post by: The00Dustin on July 18, 2011, 10:16:03 AM I also had a flag from AVG. This, though, was a flag for a PUP (Potentially Unwanted Program) raised on UfaSoft's bitcoin-miner.exe. I'm assuming this was becuase of distribution by trojans dropping the miner on PCs to generate hashes for the distributer.... And because a corporation might not want its employees using their resources for mining...Title: Re: AVG claims bitcoin is malware Post by: repentance on July 18, 2011, 10:29:41 AM I'm aware of someone who unexpectedly found bitc.exe *32 on their computer today and has submitted it to the major AV companies for analysis.
Title: Re: AVG claims bitcoin is malware Post by: ping32 on July 18, 2011, 12:14:19 PM AVG also detects your cracks and keygens for your pirated software, whats new? That's because cracks and keygens are trojans, more often than not. They do it on purpose. I read once the article from antivirus company where they mentioned they remove certain keygens, because they target the other software that company sells. Makes sense. And if they protect themselves that way, they could protect others too, if some other company will ask nicely. Title: Re: AVG claims bitcoin is malware Post by: bitcoinemily on July 18, 2011, 12:29:22 PM AVG protects you from everything that isn't consumer mainstream. Carry on citizen :-[
Title: Re: AVG claims bitcoin is malware Post by: bitnotifications on July 18, 2011, 01:17:02 PM The screenshot looks like the program decided based on heuristics. It detected P2P activity for example. This is probably not a manual black-listing action but an automatic heuristic.
Title: Re: AVG claims bitcoin is malware Post by: geckogroove on July 18, 2011, 02:38:51 PM avira detects guiminer for me but not bitcoin, its either a false positive or a warning not a detection
Title: Re: AVG claims bitcoin is malware Post by: syb3ria on July 18, 2011, 09:54:59 PM Kaspersky Virus Removal Tool detects latest poclbm.exe as destructive tool. Have that in mind when running a scan.
Title: Re: AVG claims bitcoin is malware Post by: damon1492 on July 18, 2011, 10:17:36 PM Why is AVG antivirus claiming bitcoin is malware and deleting from my pc? Same for me just started detecting it as an malware WTF!!! Title: Re: AVG claims bitcoin is malware Post by: The00Dustin on July 18, 2011, 10:17:45 PM Kaspersky Virus Removal Tool detects latest poclbm.exe as destructive tool. Have that in mind when running a scan. In the meantime, couldn't you do us all a favor and report it as a false positive?Title: Re: AVG claims bitcoin is malware Post by: nmat on July 18, 2011, 10:23:47 PM THis probably happens because botnets are probably distributing bitcoin in order to mine on zombie computers... and as a few people find the intrusion and send the unwanted files they found on their machine to AV labs for analysis, it results in bitcoin executables being flagged as malware. This is scary and definitely doesn't help bitcoin a bit... Title: Re: AVG claims bitcoin is malware Post by: The00Dustin on July 18, 2011, 10:30:00 PM I had ufasoft miner reported as a "trojan (generic)" (IOW heuristics probably) by sunbelt and reported it as a false positive. It is now a potentially unwanted program with them, which is fine, so are lots of other useful tools (including syslog servers and tftp servers). I realize free programs might not have instant or great support, but we need to submit these files and note that they are false positives so that signatures can be put in place to recognize them as what they are. Regarding them being submitted for analysis, this shouldn't lead to them being marked as something they aren't, that isn't very thorough analysis, but if most detections are heuristic, then a signature that says it's potentially unwanted is certainly preferred to a guess at what baddie it is.
Title: Re: AVG claims bitcoin is malware Post by: syb3ria on July 20, 2011, 11:19:40 AM Kaspersky Virus Removal Tool detects latest poclbm.exe as destructive tool. Have that in mind when running a scan. In the meantime, couldn't you do us all a favor and report it as a false positive?Title: Re: AVG claims bitcoin is malware Post by: The00Dustin on July 20, 2011, 01:40:40 PM Kaspersky Virus Removal Tool detects latest poclbm.exe as destructive tool. Have that in mind when running a scan. In the meantime, couldn't you do us all a favor and report it as a false positive?http://search.yahoo.com/search;_ylt=AsGZb8flldWyGZiwxiMxilWbvZx4?p=kapersky+false+positive+report&toggle=1&cop=mss&ei=UTF-8&fr=yfp-t-374 The FIRST result lead me here: http://forum.kaspersky.com/index.php?showtopic=13881 That KAPERSKY GLOBAL MODEATOR'S post lead me here: http://support.kaspersky.com/virlab/helpdesk.html That submission form that allows for attached files has a drop down that includes 'False alarm on a file' and 'False alarm on a web resource'. No offense to you, but seriously, where where exactly did you look for a report option? In the scanner itself? (That would be the most logical and understandable explanation for not finding one, but I've never seen an option to report a false positive within an AV program) Also for the record, emphasized words are to show just how simple this was to find (it was about 10 times easier than I expected, especially since Yahoo and Google are far from the same when it comes to search results). Title: Re: AVG claims bitcoin is malware Post by: JuanPabloCuervo on July 20, 2011, 04:23:34 PM http://www.av-comparatives.org/
i only trust Avira, Malwarebytes.org & System Restore. i had a virus that no other could eliminate, norton, kapersky, etc... it was a virus a few years back, that eats the cpu doing nothing... it killed some laptops with bad cooling, compaq 3000 i though it was a virus designed to kill pcs, but now i know what it really was doing... ;D |
