ADWARE/Adware.Gen7 Armory

[turvarya]

My avira found ADWARE/Adware.Gen7 in guardian.exe of Armory.
It is an old installation, I haven't used in a while.
Has anybody heard of that. Wouldn't be the first false positive with Avira ...

[1714929629]

1714929629

[1714929629]

1714929629

[1714929629]

1714929629

[unamis76]

Most probably a false positive if you're using that installation for some time without issues. Have you checked the hash of the installation file?

[tspacepilot]

If you have a compiler, why not go ahead and build from source so that you know there's not weird files being bundled with your binary.  Or, if you don't have a compiler, maybe download one (it's not too hard).

Finally, if there's no way to build from source yourself then you could at least check the binary that it was signed by the armory people's keys.  I assume there's some kind of key-signature way to download their packages (I've never used them myself), but if a bitcoin wallet didn't have some kind of key/signing on the package I'd be very surprised.

[goatpig]

guardian.exe is a very simple piece of code, meant to kill bitcoind if Armory came to crash before gracefully closing the instance of Core it is managing. It is only used when auto bitcoind management is turned on, so if you don't trust the exe, turn off that setting and delete the binary entirely.

It is also very easy to build. Download any version of Microsoft Visual Studio 201x Express (that's the free version), load the guardian project and build it. Nothing more needed.

[turvarya]

Thanks for your suggestions.
I can't remember, if I checked the signature. It was ~ 6 months ago.
I just installed it, to take a look at it and than forgot about it. So, I think, I am gonna uninstall it(the version is most probably outdated anyways)
I was just wondering if Avira is Targeting Bitcoin Software on purpose, like they also did with cracks for games.