Bitcoin Forum
May 07, 2024, 01:05:36 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Norton Internet Security's false positive. Tnx dmn trojan programers!  (Read 4642 times)
PLaci1982 (OP)
Full Member
***
Offline Offline

Activity: 168
Merit: 100


Live long and prosper. \\//,


View Profile
August 01, 2011, 08:14:57 PM
 #1

With the latest virus definitions NIS 2011 will detect an older version Ufasoft miner's bitcoin-miner.exe as Trojan.Gen (generic trojan)...
(I dl'ed it packed with GUI miner 20110614 and 20110701)

The current version are also marked "possibly bad" within Norton File Insight...

Hardware Expert / WinXP, Win7 Expert

1J5oPkyGVdb4mv44KGZQYsHS2ch6e1t4rc
The Bitcoin network protocol was designed to be extremely flexible. It can be used to create timed transactions, escrow transactions, multi-signature transactions, etc. The current features of the client only hint at what will be possible in the future.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715043936
Hero Member
*
Offline Offline

Posts: 1715043936

View Profile Personal Message (Offline)

Ignore
1715043936
Reply with quote  #2

1715043936
Report to moderator
ssateneth
Legendary
*
Offline Offline

Activity: 1344
Merit: 1004



View Profile
August 01, 2011, 08:20:18 PM
 #2

The miner itself is not a virus. Norton flagged it because the miner is being used as part of an IRC-based trojan to steal your computer's resources and make the hacker some coins at your expense.

PLaci1982 (OP)
Full Member
***
Offline Offline

Activity: 168
Merit: 100


Live long and prosper. \\//,


View Profile
August 01, 2011, 08:25:37 PM
 #3

That's why I told it's a false positive. This script kiddies irritate me.
(A real pr0 could write it's own miner....)

Hardware Expert / WinXP, Win7 Expert

1J5oPkyGVdb4mv44KGZQYsHS2ch6e1t4rc
Starlightbreaker
Legendary
*
Offline Offline

Activity: 1764
Merit: 1006



View Profile
August 02, 2011, 02:52:53 AM
 #4

norton?

well, that's your problem.
i'd rather not using anything than using norton, lol.

Diapolo
Hero Member
*****
Offline Offline

Activity: 769
Merit: 500



View Profile WWW
August 03, 2011, 03:09:36 PM
 #5

I reported 3 false positives with CGMINER files to Avira, they issue(d) and Definition Update!

cgminer.exe
libcurl-4.dll
pthreadGC2-w32.dll

Dia

Liked my former work for Bitcoin Core? Drop me a donation via:
1PwnvixzVAKnAqp8LCV8iuv7ohzX2pbn5x
bitcoin:1PwnvixzVAKnAqp8LCV8iuv7ohzX2pbn5x?label=Diapolo
film2240
Legendary
*
Offline Offline

Activity: 1022
Merit: 1000


Freelance videographer


View Profile WWW
August 07, 2011, 05:56:40 PM
 #6

Comodo firewall on my system is also reporting this as well (huh I thought a firewall is just a firewall but it behaves like AV as well)

ufasoft.exe.It loads a cmd prompt then quickly closes without doing nything and then Comodo reports that it has a trojan.

[This signature is available for rent.BTC/ETH/LTC or £50 equivalent a month]
[This signature is available for rent.BTC/ETH/LTC or £50 equivalent a month]
[This signature is available for rent.BTC/ETH/LTC or £50 equivalent a month]
computer22
Newbie
*
Offline Offline

Activity: 45
Merit: 0


View Profile
August 09, 2011, 05:11:30 AM
 #7

Comodo firewall on my system is also reporting this as well (huh I thought a firewall is just a firewall but it behaves like AV as well)

ufasoft.exe.It loads a cmd prompt then quickly closes without doing nything and then Comodo reports that it has a trojan.
It's a commandline tool. Add it to your exception list and try starting it with a -? or -h or -help parameter.
getcopy
Newbie
*
Offline Offline

Activity: 37
Merit: 0



View Profile
August 19, 2011, 02:10:10 PM
 #8

Comodo firewall on my system is also reporting this as well (huh I thought a firewall is just a firewall but it behaves like AV as well)

ufasoft.exe.It loads a cmd prompt then quickly closes without doing nything and then Comodo reports that it has a trojan.

You could try to pack the exe file with UPX. Most antivirus programs are so stupid that they can't recognize the program after packing.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!