Is litecoin core 0.10.4.0 infected with a virus ?

[bitcoincardreview.com]

Yes if any of you take a couple of minutes to read the 2016 roadmap it mentions plans to eliminate false positives from virus packages. I can remember the same thing happening with bitcoin and at least one alt coin i've downloaded over the years.

Always good to be cautious and check signature.

It happen with bitcoin which flag as: miner tool or something
I never seen it showed out : Trojan ...it really not usual

[1714659576]

1714659576

[1714659576]

1714659576

[1714659576]

1714659576

[psycodad]

Yes if any of you take a couple of minutes to read the 2016 roadmap it mentions plans to eliminate false positives from virus packages. I can remember the same thing happening with bitcoin and at least one alt coin i've downloaded over the years.

Always good to be cautious and check signature.

Are you refering to this part below?

Obfuscated blockchain data Several antivirus applications detect the Litecoin stored blockchain data as a malware threat. Litecoin 0.13 will obfuscate the blockchain data to rid these false positives.

I interpret this as AV software alerting/blocking the download of blockchain data and not false positives in the wallet itself.

These might very well be all false positives in the virustotal scan, though some of the detections do not sound like the well known "bitcoinminer-XY-bla".
When you compare scans from 10.2.2 and 10.4.0 there is quite a difference in number and kind of positives:

litecoin-0.10.4.0-win32-setup.exe: https://www.virustotal.com/en/file/21783cccfb4dc9d7de8f7e902613b6c1252819e7eb4f2e7a25eacedc7ff2ecf6/analysis/
litecoin-0.10.4.0-win64-setup.exe: https://www.virustotal.com/en/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/
litecoin-0.10.2.2-win32-setup.exe: https://www.virustotal.com/en/file/395b10086ff0b8d0919d15cc0d5e8a86376926131fb3dac79313b719e37b5bdd/analysis/
litecoin-0.10.2.2-win64-setup.exe: https://www.virustotal.com/en/file/124470d116f1a93b70ba5c43a8700113ae31d997b9fdfe7cb425af4e54e43d85/analysis/

I am not in the position to judge if there is something fishy with the 10.4.0 binaries for windows, I have no windows and not much experience in nowadays virus threats but I for myself would certainly not touch the 10.4.0 windows wallet with above info at hand.

[spartak_t]

I am not in the position to judge if there is something fishy with the 10.4.0 binaries for windows, I have no windows and not much experience in nowadays virus threats but I for myself would certainly not touch the 10.4.0 windows wallet with above info at hand.

That's what I meant when I answered to Spoetnik's post. It's a long shot, but I hope that Charlie Lee will answer to my tweet and clear up the confusion.

[bitcoincardreview.com]

I am not in the position to judge if there is something fishy with the 10.4.0 binaries for windows, I have no windows and not much experience in nowadays virus threats but I for myself would certainly not touch the 10.4.0 windows wallet with above info at hand.

That's what I meant when I answered to Spoetnik's post. It's a long shot, but I hope that Charlie Lee will answer to my tweet and clear up the confusion.

Yes I hope he will have time to look at this issue

[Spoetnik]

Fuck off with the attacking people bullshit morons.
Act like an idiot you are getting to get called an idiot !
This is day one shit you NOOBS.

And spartak you weren't saying it until after i did.
You were more than happy to fan the flames spreading hysteria and panic until i showed up !
So don't ride my coat tails..

Learn how to internet stupid noobs.. or you WILL be mocked and laughed at.
Suck it up.

By the way i have gone through this here on the forum lots AS I SAID.
None of you have probably identified new malware or know how it's even done so STFU.
I have across P2P and Crypto for about 15 years.
I have the tools and know how to use them.

SO carry on speculating kids.. let me know how that works out for ya noobs.
Yeah you let some Anti virus program TELL YOU what a virus is HAHAHHAH
"Attacked" ?
No i am pointing out how people are idiots..
Get smarter.

By the way i have not used an AV since i uninstalled Kaspersky AV in 2005 roughly.
Don't need one.
I am not a bloody NOOB  

[spartak_t]

And spartak you weren't saying it until after i did.
You were more than happy to fan the flames spreading hysteria and panic until i showed up !
So don't ride my coat tails..

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.

[losh11]

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.

Litecoin Dev here. The site is reporting false negatives.

It is highly recommended when downloading Litecoon Core from Litecoin.org, you MUST verify GPG signatures.
For the latest release of Core (0.10.4.0) this build has been signed by Adrian Gallagher.

[Pursuer]

Use an online litecoin wallet instead . the one you installed might harm your pc ?

where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

the wallet is safe and as it was mentioned it is a false report. but you should always check the signature of the wallet file you download to make sure it is not a compromised copy.

also if you have trouble with core you can use Electrum version of the wallet, there is actually an Electrum-ltc wallet available.

[losh11]

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

Whilst using online wallets are generally not recommended for long term storage of Litecoin, it would be preferable for people to use litevault.net. LiteVault was built by a well known LTC enthusiast, and coblee has personally vouched for the usage of the site.

LiteVault doesn't have access to any of your coins, and can only see an AES cipher of your private key. When you log in, your password deciphers the private key. Everything else is done within your browser (through bitcoin-js).

[bitcoincardreview.com]

Use an online litecoin wallet instead . the one you installed might harm your pc ?

where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

the wallet is safe and as it was mentioned it is a false report. but you should always check the signature of the wallet file you download to make sure it is not a compromised copy.

also if you have trouble with core you can use Electrum version of the wallet, there is actually an Electrum-ltc wallet available.

Can we make restore from litecoin core to electrum-ltc ?

[speaktome]

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.

Litecoin Dev here. The site is reporting false negatives.

It is highly recommended when downloading Litecoon Core from Litecoin.org, you MUST verify GPG signatures.
For the latest release of Core (0.10.4.0) this build has been signed by Adrian Gallagher.

Valuable information to take into account and avoid be infected by malware or virus.

Thank you!

[TheMage]

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.

Litecoin Dev here. The site is reporting false negatives.

It is highly recommended when downloading Litecoon Core from Litecoin.org, you MUST verify GPG signatures.
For the latest release of Core (0.10.4.0) this build has been signed by Adrian Gallagher.

Just swinging by to confirm what Losh said.

[someguy123]

where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online

For the people who need an online wallet:

I run LiteVault, which is an online wallet similar to Blockchain.info - we have over 20,000 users, and many other big LTC people such as TheMage, Losh11, and Coblee are happy to recommend it.

Check it out at https://www.litevault.net

Can you see my private keys?
No. Your keys are all encrypted with AES encryption before sending to the server, we never see the keys in any readable format.

What about my password? Can you see that?
No. We cannot see your password, we don't store a hash, and it's NEVER SENT TO THE SERVER, NOT IN ANY FORMAT.

Are there any fees?
There are NO FEES. If you like the service, please donate so that I can keep it free.

[bitcoincardreview.com]

where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online

For the people who need an online wallet:

I run LiteVault, which is an online wallet similar to Blockchain.info - we have over 20,000 users, and many other big LTC people such as TheMage, Losh11, and Coblee are happy to recommend it.

Check it out at https://www.litevault.net

Can you see my private keys?
No. Your keys are all encrypted with AES encryption before sending to the server, we never see the keys in any readable format.

What about my password? Can you see that?
No. We cannot see your password, we don't store a hash, and it's NEVER SENT TO THE SERVER, NOT IN ANY FORMAT.

Are there any fees?
There are NO FEES. If you like the service, please donate so that I can keep it free.

Thank you this information
that seem good with no fees
I will try it out soon

[jaesonma]

Where did u get the wallet? Use online or exchange's wallet instead. It is more safer.

[bitcoincardreview.com]

Where did u get the wallet? Use online or exchange's wallet instead. It is more safer.

It think it also have same problem with online wallet. it could be hacked or many happen with secure your online wallet

[Pursuer]

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

Whilst using online wallets are generally not recommended for long term storage of Litecoin, it would be preferable for people to use litevault.net. LiteVault was built by a well known LTC enthusiast, and coblee has personally vouched for the usage of the site.

LiteVault doesn't have access to any of your coins, and can only see an AES cipher of your private key. When you log in, your password deciphers the private key. Everything else is done within your browser (through bitcoin-js).

I am not arguing about the safety of online wallets like the one you suggest and the full explanation of it by someguy123 in two comments below yours.

all I am saying is that nothing will ever beat the cold storage. and this is something you can do with an offline computer, a live Linux, to either generate a private key and print it on a piece of paper or install a wallet like Electrum-ltc which also lets you have a watch-only-wallet on your online pc without the private keys to watch and spend .

[bbc.reporter]

It looks like the site has been compromised and is now serving an infected version of Litecoin windows client.

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

Really? This must be stickied and everyone must be alerted. We do not want the community affected badly by this.

Could it be that this is also connected to bitcoin.org's warning? I speculate there is a serious attack versus cryptocurrencies. This is the warning on bitcoin.org

"Bitcoin.org has reason to suspect that the binaries for the upcoming Bitcoin Core release will likely be targeted by state sponsored attackers. As a website, Bitcoin.org does not have the technical resources to guarantee that we can defend ourselves from attackers of this calibre. We ask the Bitcoin community, and in particular the Chinese Bitcoin community to be extra vigilant when downloading binaries from our website."

https://bitcoin.org/en/alert/2016-08-17-binary-safety

[SmirkinPepe]

Yes a virus that causes bagholderitis.

LOL

[bitcoincardreview.com]

It looks like the site has been compromised and is now serving an infected version of Litecoin windows client.

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

Really? This must be stickied and everyone must be alerted. We do not want the community affected badly by this.

Could it be that this is also connected to bitcoin.org's warning? I speculate there is a serious attack versus cryptocurrencies. This is the warning on bitcoin.org

"Bitcoin.org has reason to suspect that the binaries for the upcoming Bitcoin Core release will likely be targeted by state sponsored attackers. As a website, Bitcoin.org does not have the technical resources to guarantee that we can defend ourselves from attackers of this calibre. We ask the Bitcoin community, and in particular the Chinese Bitcoin community to be extra vigilant when downloading binaries from our website."

https://bitcoin.org/en/alert/2016-08-17-binary-safety

we still waiting reply from litecoin.org