Bitcoin Forum

any one tried using litecoin core 0.10.4.0
I download it from litecoin.org and scan with virustotal it show out :  10/54 ( 13/54 now)
it including Trojan Sality , CI.A ....

Any one can give me advice ?

Use an online litecoin wallet instead . the one you installed might harm your pc ?

yes I am thinking about online wallet
do you know good one?

are you sure it was from litecoin.org?

Consider using Electrum Litecoin (https://electrum-ltc.org/) instead, and use a Trezor to hold your private keys and sign transactions. I never use a full node anymore if there is a hardware wallet solution.

Yes I am sure
you can try to do that. take only 20 second for download and scan

It looks like the site has been compromised and is now serving an infected version of Litecoin windows client.

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

this is really bad. and i think it is getting to hard to be save. because i don't know how to handle the sources on gitbub. and gitbub could be compromised too.

Yes . that is really big problem with all litecoin user who trusted them and did not scan before using

Did you / anyone inform the dev team about this?

Could be that they are unaware of this (very likely, as the download is available and not yet offline..).

The 64 bit Win version reported 13 infected out of 54 files. Just tweeted to Charlie Lee:

https://twitter.com/FAILCommunity/status/765482508544868352

OP. please change the subject of the thread to something like "Is litecoin core 0.10.4.0 infected with a virus?". I believe it will engage more people, until we figure this out.

There have been no notable changes on github in the last months, so it is rather unlikely (I am not saying impossible!). But I agree, it's bad nonetheless.
EDIT:
Did anybody check the GPG sigs? For me they give a valid signature from an unknown key ID: 7809386C.
After learning the gpg 1-2-3 for dummies, I could verify the signature as:
gpg: Good signature from "Adrian Gallagher <thrasher@addictionsoftware.com>"

Do not have idea how long this happen with them but it really risky for us who already running them on PC

Thank for your suggestion.
I changed our topic name now

I dealt with this shit here before and it looks like your classic crypto wallet false positives.
hell read half the titles of the flags.


https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

LOL

Your all just fucking NOOBS ! hahhahah

Wallets and MINERS have been flagged like this since day 1 in Crypto.

Yeah, I saw that, thanks. We may have more opinions now.



You said "it looks" and indeed it looks like a false positives, but why are you attacking people like that? Charlie Lee has been notified and we'll see if this is normal or not. You do realize that some people (no matter what kind of noobs they are) can refrain of using the wallet because of this? Cheer up a bit...

Yes if any of you take a couple of minutes to read the 2016 roadmap it mentions plans to eliminate false positives from virus packages. I can remember the same thing happening with bitcoin and at least one alt coin i've downloaded over the years.

Always good to be cautious and check signature.

People attacking others for just asking a technical question are the worst type of forum poster. Knowledge is acquired one step at a time and none of us finish the walk.

where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online

It happen with bitcoin which flag as: miner tool or something
I never seen it showed out : Trojan ...it really not usual

Are you refering to this part below?


I interpret this as AV software alerting/blocking the download of blockchain data and not false positives in the wallet itself.

These might very well be all false positives in the virustotal scan, though some of the detections do not sound like the well known "bitcoinminer-XY-bla".
When you compare scans from 10.2.2 and 10.4.0 there is quite a difference in number and kind of positives:

litecoin-0.10.4.0-win32-setup.exe: https://www.virustotal.com/en/file/21783cccfb4dc9d7de8f7e902613b6c1252819e7eb4f2e7a25eacedc7ff2ecf6/analysis/
litecoin-0.10.4.0-win64-setup.exe: https://www.virustotal.com/en/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/
litecoin-0.10.2.2-win32-setup.exe: https://www.virustotal.com/en/file/395b10086ff0b8d0919d15cc0d5e8a86376926131fb3dac79313b719e37b5bdd/analysis/
litecoin-0.10.2.2-win64-setup.exe: https://www.virustotal.com/en/file/124470d116f1a93b70ba5c43a8700113ae31d997b9fdfe7cb425af4e54e43d85/analysis/

I am not in the position to judge if there is something fishy with the 10.4.0 binaries for windows, I have no windows and not much experience in nowadays virus threats but I for myself would certainly not touch the 10.4.0 windows wallet with above info at hand.

That's what I meant when I answered to Spoetnik's post. It's a long shot, but I hope that Charlie Lee will answer to my tweet and clear up the confusion.

Yes I hope he will have time to look at this issue

Fuck off with the attacking people bullshit morons.
Act like an idiot you are getting to get called an idiot !
This is day one shit you NOOBS.

And spartak you weren't saying it until after i did.
You were more than happy to fan the flames spreading hysteria and panic until i showed up !
So don't ride my coat tails..

Learn how to internet stupid noobs.. or you WILL be mocked and laughed at.
Suck it up.

By the way i have gone through this here on the forum lots AS I SAID.
None of you have probably identified new malware or know how it's even done so STFU.
I have across P2P and Crypto for about 15 years.
I have the tools and know how to use them.

SO carry on speculating kids.. let me know how that works out for ya noobs.
Yeah you let some Anti virus program TELL YOU what a virus is HAHAHHAH
"Attacked" ?
No i am pointing out how people are idiots..
Get smarter.

By the way i have not used an AV since i uninstalled Kaspersky AV in 2005 roughly.
Don't need one.
I am not a bloody NOOB  :D

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.

Litecoin Dev here. The site is reporting false negatives.

It is highly recommended when downloading Litecoon Core from Litecoin.org, you MUST verify GPG signatures.
For the latest release of Core (0.10.4.0) this build has been signed by Adrian Gallagher.

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

the wallet is safe and as it was mentioned it is a false report. but you should always check the signature of the wallet file you download to make sure it is not a compromised copy.

also if you have trouble with core you can use Electrum version of the wallet, there is actually an Electrum-ltc wallet available.

Whilst using online wallets are generally not recommended for long term storage of Litecoin, it would be preferable for people to use litevault.net (http://litevault.net). LiteVault was built by a well known LTC enthusiast, and coblee has personally vouched for the usage of the site.

LiteVault doesn't have access to any of your coins, and can only see an AES cipher of your private key. When you log in, your password deciphers the private key. Everything else is done within your browser (through bitcoin-js).

Can we make restore from litecoin core to electrum-ltc ?

Valuable information to take into account and avoid be infected by malware or virus.

Thank you!

Just swinging by to confirm what Losh said.

For the people who need an online wallet:

I run LiteVault, which is an online wallet similar to Blockchain.info - we have over 20,000 users, and many other big LTC people such as TheMage, Losh11, and Coblee are happy to recommend it.

Check it out at https://www.litevault.net

Can you see my private keys?
No. Your keys are all encrypted with AES encryption before sending to the server, we never see the keys in any readable format.

What about my password? Can you see that?
No. We cannot see your password, we don't store a hash, and it's NEVER SENT TO THE SERVER, NOT IN ANY FORMAT.

Are there any fees?
There are NO FEES. If you like the service, please donate so that I can keep it free.

Thank you this information
that seem good with no fees
I will try it out soon

Where did u get the wallet? Use online or exchange's wallet instead. It is more safer.

It think it also have same problem with online wallet. it could be hacked or many happen with secure your online wallet

I am not arguing about the safety of online wallets like the one you suggest and the full explanation of it by someguy123 in two comments below yours.

all I am saying is that nothing will ever beat the cold storage. and this is something you can do with an offline computer, a live Linux, to either generate a private key and print it on a piece of paper or install a wallet like Electrum-ltc which also lets you have a watch-only-wallet on your online pc without the private keys to watch and spend .

Really? This must be stickied and everyone must be alerted. We do not want the community affected badly by this.

Could it be that this is also connected to bitcoin.org's warning? I speculate there is a serious attack versus cryptocurrencies. This is the warning on bitcoin.org

"Bitcoin.org has reason to suspect that the binaries for the upcoming Bitcoin Core release will likely be targeted by state sponsored attackers. As a website, Bitcoin.org does not have the technical resources to guarantee that we can defend ourselves from attackers of this calibre. We ask the Bitcoin community, and in particular the Chinese Bitcoin community to be extra vigilant when downloading binaries from our website."

https://bitcoin.org/en/alert/2016-08-17-binary-safety

Yes a virus that causes bagholderitis.

LOL

we still waiting reply from litecoin.org

You've had a reply from a litecoin association director (TheMage) and a litecoin developer (losh11). Don't think much more needs to be said.

I do not think most of you realize how serious this is. If it is really infected by a virus then the website could be hacked. If it is then how many nodes are affected?

we still waiting for reply from them. hope someone can give us answers

That's what I do, since my Litecoin stake is ridiculously low and my usage not so intense. Using so much space on my PC for less than 1 LTC would be stupid ::)...

You have had replies, this thread needs to be closed.  There is no virus.

I thought i contributed well enough.

Kaspersky has one of the best virus def's and it was flagged as "risky"
Deemed a "miner"

Yup.. old news.
This has been going on with wallets and miners for YEARS.

The only people who did not pick up on that by the VirusTotal results must be noobs.

And yeah i could grab the binary and disassemble it with cracker tools and inspect it manually..
I have done this for a decade or two and found plenty of malware and reported it first.
You see there is people who listen to what some AV program tells them
And then there is people like me who actually scan the .exe's manually and check them out.
Kids / Noobs don't see the difference they just rail on that my Norton Antivirus says it's a Virus.
And ? So ? Who cares.. get over it.

I use to download and manually check the Crypto uploads on The Pirate bay for almost two years.
90% of them were malware / Trojans / Keyloggers etc.
Usually written in C-sharp / .net (it's gotten big with Noob malware coders)
No one else did..
It's not that hard to identify a Virus most times.

I don't even see the reason to check it and i will go on the record saying so.
If i am wrong then by all means flame me hard & long guys LOL

But please do recognize what a false positive looks like.
You WILL encounter them in Crypto sooner or later.

I do like VirusTotal as an online service though.
And i was never trying to bash the OP for posting either..
It's not bad of an idea to let people know whether it's a real virus or false positive.
I doubt most people would scan it online and older users that know would probably ignore / exempt the .exe when alerted with a resident AV.

For example.. my password manager program flags pretty much all wallets.
Because they read the clip-board data.
But there is nothing malicious about it.

Yes... This has been happening for years now. Pretty much every wallet throws a false positive of some sort. Nothing to worry about.

yeah, we can use . but we also have to carefully .
just want to heard from them with explanation.

so much dumb in one thread too hard to even know where to begin to reply.

title  :o

online wallets   :-X

oh cool spoetnik's got it covered  :D

Good information, Bad delivery. Why so hostile man? People would listen to you more if you weren't acting like a 16 year old jock hell bent on making sure everyone in the room knows he's the best.

You having a hard day?