did you check the signature after you finished downloading Electrum?
No I did not.
Topic: Electrum Bitcoin Wallet is Trojan? - page 2. (Read 2983 times)
No I did not.
did you check the signature after you finished downloading Electrum?
Download it from their official website https://electrum.org/#download The windows version.
I download the Standalone Executable or Windows Installer. Version 2.6 and 2.7 are showing as Trojans.
I download the Standalone Executable or Windows Installer. Version 2.6 and 2.7 are showing as Trojans.
Tell me that, This one will not pass any virus in my pc right. Confirm me is there any malware operation from the above mentioned version?
Download it from their official website https://electrum.org/#download The windows version.
I download the Standalone Executable or Windows Installer. Version 2.6 and 2.7 are showing as Trojans.
I download the Standalone Executable or Windows Installer. Version 2.6 and 2.7 are showing as Trojans.
I've had a couple friends do a virus check on their own Electrum wallet and it is showing as a Trojan for them as well... Not really happy by the outcome of this.... The file should 0/56 we are dealing with money here we cant be risking false positives and Electrum should do something about it now.
Another thing. The file is impossible to delete. I've tried shredding it, deleting it, deleting it through CMD. NOTHING! Its impossible. Every time i try to delete it it tells me FILE IS IN "USE" Even after restarting my PC.
It's also odd that Electrum does not show up on Programs List and its just a exe file.
Another thing. The file is impossible to delete. I've tried shredding it, deleting it, deleting it through CMD. NOTHING! Its impossible. Every time i try to delete it it tells me FILE IS IN "USE" Even after restarting my PC.
It's also odd that Electrum does not show up on Programs List and its just a exe file.
Electrum should show up in programs list. It shows very well in mine and I have downloaded it only from the official website. You do the same and I am thinking you may have download something else disguised as electrum.
Please do an immediate check with the best antivirus and internet security (for me is AVIRA).
If you downloaded the Portable version then It's normal that It only shows the .exe files , If you didn't , then you could right click the .exe and do "Open file location" .
According to Windows Defender/Microsoft , here is what the detected trojan is trying to do : https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Trojan:Win32/MultiInjector.C!rfn&ThreatID=-2147272772
I scanned the file as well , and It seems like I'm having the same results as you , however when I scan an earlier version (2.5.4) It's totally clean. So , either Electrum has been compromised (I doubt it) or ThomasV added something in the recent updates that triggered this false detection.
According to Windows Defender/Microsoft , here is what the detected trojan is trying to do : https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Trojan:Win32/MultiInjector.C!rfn&ThreatID=-2147272772
I scanned the file as well , and It seems like I'm having the same results as you , however when I scan an earlier version (2.5.4) It's totally clean. So , either Electrum has been compromised (I doubt it) or ThomasV added something in the recent updates that triggered this false detection.
I downloaded it yesterday.
After your message i checked it with Virustotal and it showed 0/53, no infections.
Verify where you downloaded it from, as ranochigo suggested.
I will keep watching on this.
I've had a couple friends do a virus check on their own Electrum wallet and it is showing as a Trojan for them as well... Not really happy by the outcome of this.... The file should 0/56 we are dealing with money here we cant be risking false positives and Electrum should do something about it now.
Another thing. The file is impossible to delete. I've tried shredding it, deleting it, deleting it through CMD. NOTHING! Its impossible. Every time i try to delete it it tells me FILE IS IN "USE" Even after restarting my PC.
It's also odd that Electrum does not show up on Programs List and its just a exe file.
Another thing. The file is impossible to delete. I've tried shredding it, deleting it, deleting it through CMD. NOTHING! Its impossible. Every time i try to delete it it tells me FILE IS IN "USE" Even after restarting my PC.
It's also odd that Electrum does not show up on Programs List and its just a exe file.
I highly doubt so. The detection ratio between the antivirus is so low that I suspect it to be a false positive and there is nothing to worry about.
Just in case, did you download the exe from here: https://electrum.org/#download ? You can also verify[1] if the checksum matches: https://download.electrum.org/2.7.2/electrum-2.7.2.exe.asc. If it does then it would be fine.
Check your entire file system for virus, not only Electrum.
[1] https://www.torproject.org/docs/verifying-signatures.html.en
Just in case, did you download the exe from here: https://electrum.org/#download ? You can also verify[1] if the checksum matches: https://download.electrum.org/2.7.2/electrum-2.7.2.exe.asc. If it does then it would be fine.
Check your entire file system for virus, not only Electrum.
[1] https://www.torproject.org/docs/verifying-signatures.html.en
Thanks for the info.
Just did a scan on Electrum wallet since I felt like my pc was acting odd and it ends up showing a Trojan on it. What should I do? Why would they add a Trojan to their file?
SHA256: c01ffe2205716284d88ba7981233b74830d3ecf7604ad57ca60e5930d397156e
File name: electrum-2.7.2.exe
Detection ratio: 1 / 56
Analysis date: 2016-10-08 07:53:18 UTC ( 0 minutes ago )
Antivirus Result Update
Invincea trojan.win32.multiinjector.c!rfn 20160928
SHA256: c01ffe2205716284d88ba7981233b74830d3ecf7604ad57ca60e5930d397156e
File name: electrum-2.7.2.exe
Detection ratio: 1 / 56
Analysis date: 2016-10-08 07:53:18 UTC ( 0 minutes ago )
Antivirus Result Update
Invincea trojan.win32.multiinjector.c!rfn 20160928
Jump to: