Pages:
Author

Topic: Is litecoin core 0.10.4.0 infected with a virus ? (Read 3357 times)

sr. member
Activity: 279
Merit: 250
September 12, 2016, 03:15:34 PM
#50
You have had replies, this thread needs to be closed.  There is no virus.

I thought i contributed well enough.

Kaspersky has one of the best virus def's and it was flagged as "risky"
Deemed a "miner"

Yup.. old news.
This has been going on with wallets and miners for YEARS.

The only people who did not pick up on that by the VirusTotal results must be noobs.

And yeah i could grab the binary and disassemble it with cracker tools and inspect it manually..
I have done this for a decade or two and found plenty of malware and reported it first.
You see there is people who listen to what some AV program tells them
And then there is people like me who actually scan the .exe's manually and check them out.
Kids / Noobs don't see the difference they just rail on that my Norton Antivirus says it's a Virus.
And ? So ? Who cares.. get over it.

I use to download and manually check the Crypto uploads on The Pirate bay for almost two years.
90% of them were malware / Trojans / Keyloggers etc.
Usually written in C-sharp / .net (it's gotten big with Noob malware coders)
No one else did..
It's not that hard to identify a Virus most times.

I don't even see the reason to check it and i will go on the record saying so.
If i am wrong then by all means flame me hard & long guys LOL

But please do recognize what a false positive looks like.
You WILL encounter them in Crypto sooner or later.

I do like VirusTotal as an online service though.
And i was never trying to bash the OP for posting either..
It's not bad of an idea to let people know whether it's a real virus or false positive.
I doubt most people would scan it online and older users that know would probably ignore / exempt the .exe when alerted with a resident AV.

For example.. my password manager program flags pretty much all wallets.
Because they read the clip-board data.
But there is nothing malicious about it.

Good information, Bad delivery. Why so hostile man? People would listen to you more if you weren't acting like a 16 year old jock hell bent on making sure everyone in the room knows he's the best.

You having a hard day?
legendary
Activity: 1876
Merit: 1000
so much dumb in one thread too hard to even know where to begin to reply.

title  Shocked

online wallets   Lips sealed

oh cool spoetnik's got it covered  Cheesy



newbie
Activity: 27
Merit: 0
Yes... This has been happening for years now. Pretty much every wallet throws a false positive of some sort. Nothing to worry about.
yeah, we can use . but we also have to carefully .
just want to heard from them with explanation.
legendary
Activity: 980
Merit: 1000
Yes... This has been happening for years now. Pretty much every wallet throws a false positive of some sort. Nothing to worry about.
legendary
Activity: 1540
Merit: 1011
FUD Philanthropist™
You have had replies, this thread needs to be closed.  There is no virus.

I thought i contributed well enough.

Kaspersky has one of the best virus def's and it was flagged as "risky"
Deemed a "miner"

Yup.. old news.
This has been going on with wallets and miners for YEARS.

The only people who did not pick up on that by the VirusTotal results must be noobs.

And yeah i could grab the binary and disassemble it with cracker tools and inspect it manually..
I have done this for a decade or two and found plenty of malware and reported it first.
You see there is people who listen to what some AV program tells them
And then there is people like me who actually scan the .exe's manually and check them out.
Kids / Noobs don't see the difference they just rail on that my Norton Antivirus says it's a Virus.
And ? So ? Who cares.. get over it.

I use to download and manually check the Crypto uploads on The Pirate bay for almost two years.
90% of them were malware / Trojans / Keyloggers etc.
Usually written in C-sharp / .net (it's gotten big with Noob malware coders)
No one else did..
It's not that hard to identify a Virus most times.

I don't even see the reason to check it and i will go on the record saying so.
If i am wrong then by all means flame me hard & long guys LOL

But please do recognize what a false positive looks like.
You WILL encounter them in Crypto sooner or later.

I do like VirusTotal as an online service though.
And i was never trying to bash the OP for posting either..
It's not bad of an idea to let people know whether it's a real virus or false positive.
I doubt most people would scan it online and older users that know would probably ignore / exempt the .exe when alerted with a resident AV.

For example.. my password manager program flags pretty much all wallets.
Because they read the clip-board data.
But there is nothing malicious about it.
sr. member
Activity: 335
Merit: 250
You have had replies, this thread needs to be closed.  There is no virus.
sr. member
Activity: 379
Merit: 250
Consider using Electrum Litecoin instead, and use a Trezor to hold your private keys and sign transactions. I never use a full node anymore if there is a hardware wallet solution.

That's what I do, since my Litecoin stake is ridiculously low and my usage not so intense. Using so much space on my PC for less than 1 LTC would be stupid Roll Eyes...
newbie
Activity: 27
Merit: 0
I do not think most of you realize how serious this is. If it is really infected by a virus then the website could be hacked. If it is then how many nodes are affected?

we still waiting for reply from them. hope someone can give us answers
legendary
Activity: 3010
Merit: 1460
I do not think most of you realize how serious this is. If it is really infected by a virus then the website could be hacked. If it is then how many nodes are affected?
hero member
Activity: 728
Merit: 500
It looks like the site has been compromised and is now serving an infected version of Litecoin windows client.

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

Really? This must be stickied and everyone must be alerted. We do not want the community affected badly by this.

Could it be that this is also connected to bitcoin.org's warning? I speculate there is a serious attack versus cryptocurrencies. This is the warning on bitcoin.org

"Bitcoin.org has reason to suspect that the binaries for the upcoming Bitcoin Core release will likely be targeted by state sponsored attackers. As a website, Bitcoin.org does not have the technical resources to guarantee that we can defend ourselves from attackers of this calibre. We ask the Bitcoin community, and in particular the Chinese Bitcoin community to be extra vigilant when downloading binaries from our website."

https://bitcoin.org/en/alert/2016-08-17-binary-safety



we still waiting reply from litecoin.org

You've had a reply from a litecoin association director (TheMage) and a litecoin developer (losh11). Don't think much more needs to be said.
newbie
Activity: 27
Merit: 0
It looks like the site has been compromised and is now serving an infected version of Litecoin windows client.

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

Really? This must be stickied and everyone must be alerted. We do not want the community affected badly by this.

Could it be that this is also connected to bitcoin.org's warning? I speculate there is a serious attack versus cryptocurrencies. This is the warning on bitcoin.org

"Bitcoin.org has reason to suspect that the binaries for the upcoming Bitcoin Core release will likely be targeted by state sponsored attackers. As a website, Bitcoin.org does not have the technical resources to guarantee that we can defend ourselves from attackers of this calibre. We ask the Bitcoin community, and in particular the Chinese Bitcoin community to be extra vigilant when downloading binaries from our website."

https://bitcoin.org/en/alert/2016-08-17-binary-safety



we still waiting reply from litecoin.org
member
Activity: 84
Merit: 10
Yes a virus that causes bagholderitis.

LOL
legendary
Activity: 3010
Merit: 1460
It looks like the site has been compromised and is now serving an infected version of Litecoin windows client.

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

Really? This must be stickied and everyone must be alerted. We do not want the community affected badly by this.

Could it be that this is also connected to bitcoin.org's warning? I speculate there is a serious attack versus cryptocurrencies. This is the warning on bitcoin.org

"Bitcoin.org has reason to suspect that the binaries for the upcoming Bitcoin Core release will likely be targeted by state sponsored attackers. As a website, Bitcoin.org does not have the technical resources to guarantee that we can defend ourselves from attackers of this calibre. We ask the Bitcoin community, and in particular the Chinese Bitcoin community to be extra vigilant when downloading binaries from our website."

https://bitcoin.org/en/alert/2016-08-17-binary-safety

legendary
Activity: 1638
Merit: 1163
Where is my ring of blades...

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

Whilst using online wallets are generally not recommended for long term storage of Litecoin, it would be preferable for people to use litevault.net. LiteVault was built by a well known LTC enthusiast, and coblee has personally vouched for the usage of the site.

LiteVault doesn't have access to any of your coins, and can only see an AES cipher of your private key. When you log in, your password deciphers the private key. Everything else is done within your browser (through bitcoin-js).

I am not arguing about the safety of online wallets like the one you suggest and the full explanation of it by someguy123 in two comments below yours.

all I am saying is that nothing will ever beat the cold storage. and this is something you can do with an offline computer, a live Linux, to either generate a private key and print it on a piece of paper or install a wallet like Electrum-ltc which also lets you have a watch-only-wallet on your online pc without the private keys to watch and spend .
newbie
Activity: 27
Merit: 0
Where did u get the wallet? Use online or exchange's wallet instead. It is more safer.
It think it also have same problem with online wallet. it could be hacked or many happen with secure your online wallet
member
Activity: 99
Merit: 10
Where did u get the wallet? Use online or exchange's wallet instead. It is more safer.
newbie
Activity: 27
Merit: 0
where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online
For the people who need an online wallet:

I run LiteVault, which is an online wallet similar to Blockchain.info - we have over 20,000 users, and many other big LTC people such as TheMage, Losh11, and Coblee are happy to recommend it.

Check it out at https://www.litevault.net

Can you see my private keys?
No. Your keys are all encrypted with AES encryption before sending to the server, we never see the keys in any readable format.

What about my password? Can you see that?
No. We cannot see your password, we don't store a hash, and it's NEVER SENT TO THE SERVER, NOT IN ANY FORMAT.

Are there any fees?
There are NO FEES. If you like the service, please donate so that I can keep it free.

Thank you this information
that seem good with no fees
I will try it out soon
sr. member
Activity: 336
Merit: 254
CEO of Privex Inc. (www.privex.io)
where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online
For the people who need an online wallet:

I run LiteVault, which is an online wallet similar to Blockchain.info - we have over 20,000 users, and many other big LTC people such as TheMage, Losh11, and Coblee are happy to recommend it.

Check it out at https://www.litevault.net

Can you see my private keys?
No. Your keys are all encrypted with AES encryption before sending to the server, we never see the keys in any readable format.

What about my password? Can you see that?
No. We cannot see your password, we don't store a hash, and it's NEVER SENT TO THE SERVER, NOT IN ANY FORMAT.

Are there any fees?
There are NO FEES. If you like the service, please donate so that I can keep it free.
hero member
Activity: 812
Merit: 1000
Litecoin Association Director

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.



Litecoin Dev here. The site is reporting false negatives.

It is highly recommended when downloading Litecoon Core from Litecoin.org, you MUST verify GPG signatures.
For the latest release of Core (0.10.4.0) this build has been signed by Adrian Gallagher.


Just swinging by to confirm what Losh said.
sr. member
Activity: 462
Merit: 250

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.



Litecoin Dev here. The site is reporting false negatives.

It is highly recommended when downloading Litecoon Core from Litecoin.org, you MUST verify GPG signatures.
For the latest release of Core (0.10.4.0) this build has been signed by Adrian Gallagher.

Valuable information to take into account and avoid be infected by malware or virus.

Thank you!
Pages:
Jump to: