Virus detected in application
log in

Advanced search

Message boards : Number crunching : Virus detected in application

Author Message
[BOINCstats] Willy
Send message
Joined: 14 Mar 15
Posts: 1
Credit: 16,160
RAC: 0
Message 96 - Posted: 23 Mar 2015, 7:41:03 UTC

G Data detects the "Trojan.GenerickKD" virus in application 2.29.

Profile Daniel
Project administrator
Send message
Joined: 5 Mar 15
Posts: 73
Credit: 162,134
RAC: 0
Message 99 - Posted: 24 Mar 2015, 2:45:26 UTC - in response to Message 96.

G Data detects the "Trojan.GenerickKD" virus in application 2.29.


Willy, that is a false positive. Here is our source code:

https://github.com/hmonroe/vdw/blob/master/VDWDaniel/src/vdwnumbersBOINC.cpp

We reported the false positive here https://su.gdatasoftware.com/us/sample-submission. Please help us to do the same. The Windows version is compiled with Visual C++ 10 Express and some antivirus software including Avast identifies anything compiled by VC++ as a virus. VirusTotal.com says that our download is safe according to over 60 different programs:

https://www.virustotal.com/en/url/eba6046b03d6b64668f7a4e666d03bd7f5c59277ba210dbd4b911bae062543b9/analysis/1427156291/

Our server is in Amazon EC2 and can be upsized if there is a burst of demand.

Thanks for adding our site to BOINCStats. Can you refresh the site title to be "123Numbers.org" or will that happen automatically?

Daniel

Profile aendgraend
Send message
Joined: 9 Mar 15
Posts: 1
Credit: 102,084
RAC: 0
Message 100 - Posted: 24 Mar 2015, 15:38:14 UTC

Avira Antivirus Professional detects the Application as Trojan "TR/Graftor.594944.2"

Why does this happen? Is the App Version 300 that much different to the earlier Version?

Profile DoctorNow
Avatar
Send message
Joined: 9 Mar 15
Posts: 4
Credit: 17,425
RAC: 0
Message 106 - Posted: 25 Mar 2015, 10:58:43 UTC - in response to Message 100.

Avira Antivirus Professional detects the Application as Trojan "TR/Graftor.594944.2"

They're always called different. My Avira version says it's a Rogue.595968.11.
Since it's the free version I even cannot exclude the BOINC folder so I have to endure the constant messages.
____________
Life is Science, and Science rules. To the universe and beyond
Member of BOINC Confederation
My BOINC-Stats

Dirk Broer
Send message
Joined: 11 Mar 15
Posts: 4
Credit: 175,901
RAC: 0
Message 109 - Posted: 25 Mar 2015, 23:07:51 UTC

AVG blocks the executable claiming IDP.Program.D1B0A5C0 is found

beastman
Send message
Joined: 29 Mar 15
Posts: 1
Credit: 0
RAC: 0
Message 117 - Posted: 29 Mar 2015, 0:32:06 UTC

I got a virus alert from AVG as well about the exe file containing a trojan virus. For safety sake, I did remove the project. I would have left it and just used the ignore option, but was concerned that it would also ignore the same problem in a true virus situation.

Hope that 123numbers.org can fix this in there compiling, so this sort of error doesn't occur. I understand that they are likely to be totally virus free, but I go with the better safe then sorry premise when dealing with viruses.

If they are able to fix this issue, please post a message on the forums. I will happily add the project back in to my list of work projects.

BTW, which website name is the preferred way to attach the project?? 'http://123numbers.org/' or 'http://www.vdwnumbers.org/'

Best of luck,

Beastman

Stanley A Bourdon
Send message
Joined: 29 Mar 15
Posts: 3
Credit: 7,073
RAC: 0
Message 136 - Posted: 4 Apr 2015, 18:16:52 UTC

i get the same message from AVG. and say ignore

but have been unable to complete a download.

do not know if they are related.

Profile Tuna Ertemalp
Avatar
Send message
Joined: 3 Apr 15
Posts: 6
Credit: 377,941
RAC: 0
Message 137 - Posted: 5 Apr 2015, 22:21:15 UTC
Last modified: 5 Apr 2015, 22:21:32 UTC

I liked the description of this project and added it to my set of projects. However, as the files were being downloaded, my virus protection software AVG detected a Trojan Horse while it was being installed. This is what it said: http://1drv.ms/1y5voBB

This is inline with the above experiences. I really hope that this will be fixed by the project owners. Otherwise running an EXE that the virus checker complains about is iffy at best.

Thanks
Tuna
____________

Profile Ralfy
Send message
Joined: 10 Mar 15
Posts: 3
Credit: 17,045,483
RAC: 0
Message 138 - Posted: 6 Apr 2015, 12:33:06 UTC

Hi, Stanley, Tuna,

please read the 'how to' exclude a file or folder from the AVG scan detection.

Go there: http://www.avg.com/eu-en/faq.num-5190

Profile Tuna Ertemalp
Avatar
Send message
Joined: 3 Apr 15
Posts: 6
Credit: 377,941
RAC: 0
Message 139 - Posted: 6 Apr 2015, 16:56:36 UTC - in response to Message 138.

The issue here is not if people know how to do exceptions in antivirus software. The problem is that there is an EXE for which a variety of virus checkers are reporting problems. In this day and age, it is not wise for people to get into the habit of taking these warnings lightly and simply ignoring them, simply because they trust the source. Even though there is no reason for this EXE to carry a virus, who is to say that it didn't get infected somewhere along the line in a way that the project maintainers' virus checkers are not detecting, but ours do? This might not be the case for this insurance, but might be the case next time with another project. How about of I were to put an exception for this EXE and in a month it suddenly does get infected?

The right fix is for the EXE to be recompiled to remove whatever is triggering these threat warnings. Nothing less...

Thanks for listening
Tuna
____________

Profile Tuna Ertemalp
Avatar
Send message
Joined: 3 Apr 15
Posts: 6
Credit: 377,941
RAC: 0
Message 140 - Posted: 6 Apr 2015, 23:22:52 UTC - in response to Message 139.

Come to think of it, this is a great opportunity for an evil hacker. If I were him, I'd wait for a while, watching the number of users grow on this project. Then I would find a way to hack into the server where this project is hosted and infect the EXE for real. Then everyone would get the new infected EXE either because they already made an exception for that EXE in their antivirus software, or would make an exception since they heard that this EXE causes a false positive on some machines and they just were unlucky enough to finally get that false positive. Then I would have my virus use the new machines that just got infected to spread even more!

Good thing I am not an evil hacker... :)
____________

Profile Tuna Ertemalp
Avatar
Send message
Joined: 3 Apr 15
Posts: 6
Credit: 377,941
RAC: 0
Message 144 - Posted: 12 Apr 2015, 22:45:50 UTC

Can you at least report your EXE and CPP to http://samplesubmit.avg.com/ so that AVG doesn't produce a false positive? Your link to VirusTotal says that AVG scanned you clean on March 23rd, however I got the virus alert from AVG on Apr 4, using the latest AVG. So, either your EXE changed between March 23 and April 4, or VirusTotal is using an older AVG...
____________

Viking69
Send message
Joined: 21 May 15
Posts: 3
Credit: 0
RAC: 0
Message 175 - Posted: 21 May 2015, 8:16:42 UTC

I agree w/ Tuna... I will not let the hint of a virus on my pc if I can help it. AVG here too.

Viking69
Send message
Joined: 21 May 15
Posts: 3
Credit: 0
RAC: 0
Message 176 - Posted: 21 May 2015, 8:17:24 UTC

I agree w/ Tuna... I will not let the hint of a virus on my pc if I can help it. AVG here too.

Viking69
Send message
Joined: 21 May 15
Posts: 3
Credit: 0
RAC: 0
Message 184 - Posted: 26 May 2015, 13:52:31 UTC

Hi, even if I let the AV software ignore the virus, all my downloads are listed as DOWNLOAD ERROR.


Post to thread

Message boards : Number crunching : Virus detected in application


Main page · Your account · Message boards


Code and content created by Daniel Monroe © 2018.