Bitcoin Forum
September 25, 2016, 02:00:39 PM *
News: Latest stable version of Bitcoin Core: 0.13.0 (New!) [Torrent]. Make sure you verify it.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: NOD32 detects new heur_pe in Bitcoin  (Read 4517 times)
giik
Newbie
*
Offline Offline

Activity: 24


View Profile
February 15, 2010, 03:52:43 PM
 #1

Using hitman pro, the anti-virus tool detected a new heur_pe threat in Bitcoin. Is it possible that Bitcoin contains code of worms/trojans? Or is this a false positve.

Code:
bitcoin.exe
C:\Program Files (x86)\Bitcoin\

probably unknown NewHEUR_PE virus
1474812039
Hero Member
*
Offline Offline

Posts: 1474812039

View Profile Personal Message (Offline)

Ignore
1474812039
Reply with quote  #2

1474812039
Report to moderator
1474812039
Hero Member
*
Offline Offline

Posts: 1474812039

View Profile Personal Message (Offline)

Ignore
1474812039
Reply with quote  #2

1474812039
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1474812039
Hero Member
*
Offline Offline

Posts: 1474812039

View Profile Personal Message (Offline)

Ignore
1474812039
Reply with quote  #2

1474812039
Report to moderator
1474812039
Hero Member
*
Offline Offline

Posts: 1474812039

View Profile Personal Message (Offline)

Ignore
1474812039
Reply with quote  #2

1474812039
Report to moderator
1474812039
Hero Member
*
Offline Offline

Posts: 1474812039

View Profile Personal Message (Offline)

Ignore
1474812039
Reply with quote  #2

1474812039
Report to moderator
BitcoinFX
Legendary
*
Offline Offline

Activity: 1358


youtu.be/DyV0OfU3-FU


View Profile WWW
February 15, 2010, 04:58:02 PM
 #2

I'm 100% certain that it is a 'false positive' NewHEUR_PE is a 'Heur'istic-based detection.

See: http://www.eset.com/threat-center/encyclopedia/glossary/newheurpe

I will repeat part of a previous post.

Let me explain further. Bitcoin is not a virus. What you have experienced is know as an anti-virus 'false positive' identification.

See: http://wikipedia.org/wiki/Antivirus_software#False_positives "A false positive is identifying a file as a virus when it is not a virus."

This often happens with 'new' software because anti-virus programs have never seen the program before. Anti-virus programs use Heuristic-based detection to try and identify unknown viruses, they basically guess if a program is malicious or not to try and 'protect' your PC.

Anti-virus programs are somewhat simple in this respect, however they must enforce an "It's better to be safe than sorry" policy to secure their customer base.

Maybe one day they will accept Bitcoins as payment for their products. Grin

I'm going to send a copy of the Bitcoin.exe installers to as many security, anti-adware, anti-malware and anti-virus companies as I can find, for clarification.

This will make sure that Bitcoin is put on their 'allowed' list more quickly and will reduce the number of confused new users.

I was a very early Bitcoin adopter - I mined and sold over 12,500+ BTC before they reached just a few cents! I bought a slice of a rather famous Pizza!? and donated 500 BTC to the first Bitcoin Faucet. Got a bit lost along the way... logged out 2010... logged back in 2013... I did 'find' around 25 BTC (in old wallets and sites), which is better than none! <> BBR - CBX - CURE - DASHEMCGAP - GRC - LTC - MINT - NMC - NuBits - PPC - SLM - START - XPM - <> This is not investment advice! <>
BitcoinFX
Legendary
*
Offline Offline

Activity: 1358


youtu.be/DyV0OfU3-FU


View Profile WWW
February 15, 2010, 05:13:44 PM
 #3

OK I have sent it to:

Jotti online file scanning service at http://virusscan.jotti.org/ - All participating AVs will get a copy

VirusTotal online file scanning service at http://www.virustotal.com/ - All participating AVs will get a copy

Also, Ad-aware ThreatWork and some other online scanners.

I don't expect them to report any real problems. However, this will help to get Bitcoin added to their users 'allowed' lists more quickly. Cool

http://virusscan.jotti.org/en/scanresult/965fa033015c3f5be619dbe58dc5706dbde9fdec/2e346be0ba06c1c9a36b00705b92cd34f7d37893

https://www.virustotal.com/analisis/8fd5fefced48112b03e9683c52a62daac0b2e007a0a83dc4dd9b856d3dfbe487-1266194710

OK. All 'false positives' as far as I can gather !


I was a very early Bitcoin adopter - I mined and sold over 12,500+ BTC before they reached just a few cents! I bought a slice of a rather famous Pizza!? and donated 500 BTC to the first Bitcoin Faucet. Got a bit lost along the way... logged out 2010... logged back in 2013... I did 'find' around 25 BTC (in old wallets and sites), which is better than none! <> BBR - CBX - CURE - DASHEMCGAP - GRC - LTC - MINT - NMC - NuBits - PPC - SLM - START - XPM - <> This is not investment advice! <>
giik
Newbie
*
Offline Offline

Activity: 24


View Profile
February 15, 2010, 07:20:32 PM
 #4

I thought so, but my boss wasn't so pleased to find out I had a "virus" on my computer. I will add the software to the "identify this as allowed software" list.
bitcoinex
Sr. Member
****
Offline Offline

Activity: 350


probiwon.com


View Profile WWW
November 26, 2010, 04:31:33 AM
 #5

Problem still exists and it frightens users.

New bitcoin lottery: probiwon.com
- Может, ты ещё и в Невидимую Руку Рынка веруешь? - Зачем же веровать в то, что можно наблюдать непосредственно?
nelisky
Legendary
*
Offline Offline

Activity: 1554


View Profile
November 26, 2010, 03:21:07 PM
 #6

We all want / expect bitcoin to be viral, so let me fix this for you:

There is no bad virus inside bitcoin.

Or should we just state that bitcoin is the virus instead? Smiley
nelisky
Legendary
*
Offline Offline

Activity: 1554


View Profile
November 26, 2010, 05:48:47 PM
 #7

Or should we just state that bitcoin is the virus instead? Smiley

That should be sufficiently confusing to still scare the average person. I think we should stay away from that.

Either your irony skills are much better than mine, or my irony skills suck to the point of them going unnoticed...
bitcoinex
Sr. Member
****
Offline Offline

Activity: 350


probiwon.com


View Profile WWW
December 05, 2010, 02:21:40 PM
 #8

You can see the code in sourceforge and compile that same code yourself, creating the same .exe files. There is no virus inside bitcoin.

Might be worth something to change in the official build?

New bitcoin lottery: probiwon.com
- Может, ты ещё и в Невидимую Руку Рынка веруешь? - Зачем же веровать в то, что можно наблюдать непосредственно?
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!