Bitcoin Forum

Bitcoin => Electrum => Topic started by: vaughanm on May 19, 2019, 02:25:17 AM



Title: Electrum-3.3.6 Trojan.GenericKD.41303315
Post by: vaughanm on May 19, 2019, 02:25:17 AM
Today when trying to run Electrum wallet [ 3.3.6 ] from Win10pro desktop, Bitdefender Total Security 2019 stopped application from running and flagged a Trojan threat. 

Also please note, today re-downloaded Electrum-3.3.6 for Windows (7 and higher) Windows Installer from official website [ https://electrum.org/#download ] is showing a Trojan [ Trojan.GenericKD.41303315 ] when scanned with Bitdefender Total Security 2019. 

Have reverted back to version 3.3.5 with no issues.


Title: Re: Electrum-3.3.6 Trojan.GenericKD.41303315
Post by: nc50lc on May 19, 2019, 02:41:59 AM
Hmm, have you excluded v3.3.5 to your antivirus' real-time protection and scanner before? Because, all versions will always have a false positive detection due to the nature of Electrum's code (written in python).
If that's the case (or even not), exclude v3.3.6 as well.

It's up to you to trust it since you're already trusting v3.3.5 with false positive detection too (check both on virustotal.com)


Title: Re: Electrum-3.3.6 Trojan.GenericKD.41303315
Post by: TryNinja on May 19, 2019, 03:00:14 AM
Electrum is known from having false-positives. If you downloaded from the right website, then that’s nothing.

Verify your Electrum signature by following this guide: https://bitcoinelectrum.com/how-to-verify-your-electrum-download/

If it returns valid, you are good to go.


Title: Re: Electrum-3.3.6 Trojan.GenericKD.41303315
Post by: pooya87 on May 19, 2019, 04:05:36 AM
here is the only thing you can do:
1. trust the source code
2. trust the developers.

if you trust the code (1) then go to Electrum's GitHub repository (https://github.com/spesmilo/electrum/) download the source code and compile it yourself. then if you see an AV error you know it is false.
if you trust the developers (2) then download the binaries they provided and make sure you verify the signature of the file using their PGP public key. then if you see that error again you know it is false.

but it is the matter of what you want to trust and that part is the hardest. if you are uneasy about things then go with first option but try to learn how it works first so that you don't break anything.


Title: Re: Electrum-3.3.6 Trojan.GenericKD.41303315
Post by: vaughanm on May 19, 2019, 04:49:56 AM
Thanks to everyone for replying and sharing advice on this issue, much appreciated!

Cheers,


vm