Microsoft Security Essentials

[joker060]

Is now recognizing bitcoin-miner.exe from th GUIminer file as a threat.

[1714967153]

1714967153

[1714967153]

1714967153

[1714967153]

1714967153

[1714967153]

1714967153

[1714967153]

1714967153

[1714967153]

1714967153

[bitplane]

Report it as a false positive.

[onesalt]

No, its because what I said about 2 months ago about trojans bundling bitcoin clients with their payloads in order to make money. This isn't a false posititive it's a legitimate positive because any bitcoin client is going to look exactly like a trojen one in terms of virus signature.

[Jezzz]

I have noticed several other legitimate apps getting reported also.  FWIW

[onesalt]

I have noticed several other legitimate apps getting reported also.  FWIW

Becuase they all look like a known botnet/trojan to MSE and other AV programs because they have exactly the same characteristics as a known botnet/trojan.

[Exonumia]

Is now recognizing bitcoin-miner.exe from th GUIminer file as a threat.

Ikarus (the av engine I use) labels it as "possible-Threat.Win32.BitCoinMiner", they originally labeled it as a Trojan but changed it to "possible threat" after many submitted it for analysis.
They do this to alert people who have no idea what bitcoin is that there is an issue happening on their machines.

http://www.f-secure.com/weblog/archives/00002207.html

[Zoomer]

No, its because what I said about 2 months ago about trojans bundling bitcoin clients with their payloads in order to make money. This isn't a false posititive it's a legitimate positive because any bitcoin client is going to look exactly like a trojen one in terms of virus signature.

It is a false positive; they should be trying to detect code wrapping it so it can be controlled.

[worldinacoin]

I just disable the warning and proceed with the installation, as long as you get the software from a trusted source, I do not see the problem.

[zwierzak]

This is why most of AV detects miners as threat:
http://img851.imageshack.us/img851/9199/combofixm.jpg
http://img233.imageshack.us/img233/7248/malwaremal.jpg
It is all because creators of viruses are so lazy that they don't take source code of miner and use it in virus but they copy binary files from creator of miner and write only starter (something like GUIMiner). So viruses use original files of miners so AV threat them also as virus!