Is litecoin core 0.10.4.0 infected with a virus ? - page 2.

bitcoincardreview.com

newbie

Activity: 27

Merit: 0

Quote from: Pursuer on August 17, 2016, 02:14:19 AM

Quote from: selfion on August 16, 2016, 06:46:52 AM

Quote from: Sunfire_99 on August 15, 2016, 11:44:16 AM

Use an online litecoin wallet instead . the one you installed might harm your pc ?

where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

the wallet is safe and as it was mentioned it is a false report. but you should always check the signature of the wallet file you download to make sure it is not a compromised copy.

also if you have trouble with core you can use Electrum version of the wallet, there is actually an Electrum-ltc wallet available.

Can we make restore from litecoin core to electrum-ltc ?

losh11

full member

Activity: 299

Merit: 100

Quote from: Pursuer on August 17, 2016, 02:14:19 AM

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

Whilst using online wallets are generally not recommended for long term storage of Litecoin, it would be preferable for people to use litevault.net. LiteVault was built by a well known LTC enthusiast, and coblee has personally vouched for the usage of the site.

LiteVault doesn't have access to any of your coins, and can only see an AES cipher of your private key. When you log in, your password deciphers the private key. Everything else is done within your browser (through bitcoin-js).

Pursuer

legendary

Activity: 1638

Merit: 1163

Where is my ring of blades...

Quote from: selfion on August 16, 2016, 06:46:52 AM

Quote from: Sunfire_99 on August 15, 2016, 11:44:16 AM

Use an online litecoin wallet instead . the one you installed might harm your pc ?

where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online

do not use online wallets and certainly do not use an exchange site for storing any coins not only litecoin because of the risks these methods have.

the wallet is safe and as it was mentioned it is a false report. but you should always check the signature of the wallet file you download to make sure it is not a compromised copy.

also if you have trouble with core you can use Electrum version of the wallet, there is actually an Electrum-ltc wallet available.

losh11

full member

Activity: 299

Merit: 100

Quote from: spartak_t on August 16, 2016, 12:09:32 PM

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.

Litecoin Dev here. The site is reporting false negatives.

It is highly recommended when downloading Litecoon Core from Litecoin.org, you MUST verify GPG signatures.
For the latest release of Core (0.10.4.0) this build has been signed by Adrian Gallagher.

spartak_t

legendary

Activity: 1960

Merit: 1176

@FAILCommunity

Quote from: Spoetnik on August 16, 2016, 11:56:32 AM

And spartak you weren't saying it until after i did.
You were more than happy to fan the flames spreading hysteria and panic until i showed up !
So don't ride my coat tails..

And it wasn't my intention for saying it (and I didn't said it). How would you know if I was "happy" about it? What I did is to address this to the most trustfull guy when it comes to Litecoin - Charlie Lee. As far as I know you are something like Litecoin defender (i.e. you are not like the bunch of brainless shills who are attacking it) and you can call me noob, but it seems that you don't understand the "marketing/client side". OP is a "client" with some concerns and its better to clear them out, instead bragging with how much you know about stuff and how stupid he is.

Spoetnik

legendary

Activity: 1540

Merit: 1011

FUD Philanthropist™

Fuck off with the attacking people bullshit morons.
Act like an idiot you are getting to get called an idiot !
This is day one shit you NOOBS.

And spartak you weren't saying it until after i did.
You were more than happy to fan the flames spreading hysteria and panic until i showed up !
So don't ride my coat tails..

Learn how to internet stupid noobs.. or you WILL be mocked and laughed at.
Suck it up.

By the way i have gone through this here on the forum lots AS I SAID.
None of you have probably identified new malware or know how it's even done so STFU.
I have across P2P and Crypto for about 15 years.
I have the tools and know how to use them.

SO carry on speculating kids.. let me know how that works out for ya noobs.
Yeah you let some Anti virus program TELL YOU what a virus is HAHAHHAH
"Attacked" ?
No i am pointing out how people are idiots..
Get smarter.

By the way i have not used an AV since i uninstalled Kaspersky AV in 2005 roughly.
Don't need one.
I am not a bloody NOOB Cheesy

bitcoincardreview.com

newbie

Activity: 27

Merit: 0

Quote from: spartak_t on August 16, 2016, 10:13:35 AM

Quote from: psycodad on August 16, 2016, 10:08:56 AM

I am not in the position to judge if there is something fishy with the 10.4.0 binaries for windows, I have no windows and not much experience in nowadays virus threats but I for myself would certainly not touch the 10.4.0 windows wallet with above info at hand.

That's what I meant when I answered to Spoetnik's post. It's a long shot, but I hope that Charlie Lee will answer to my tweet and clear up the confusion.

Yes I hope he will have time to look at this issue

spartak_t

legendary

Activity: 1960

Merit: 1176

@FAILCommunity

Quote from: psycodad on August 16, 2016, 10:08:56 AM

I am not in the position to judge if there is something fishy with the 10.4.0 binaries for windows, I have no windows and not much experience in nowadays virus threats but I for myself would certainly not touch the 10.4.0 windows wallet with above info at hand.

That's what I meant when I answered to Spoetnik's post. It's a long shot, but I hope that Charlie Lee will answer to my tweet and clear up the confusion.

psycodad

legendary

Activity: 1612

Merit: 1608

精神分析的爸

Quote from: shyliar on August 16, 2016, 06:31:20 AM

Yes if any of you take a couple of minutes to read the 2016 roadmap it mentions plans to eliminate false positives from virus packages. I can remember the same thing happening with bitcoin and at least one alt coin i've downloaded over the years.

Always good to be cautious and check signature.

Are you refering to this part below?

Quote from: litecoin.org

Obfuscated blockchain data Several antivirus applications detect the Litecoin stored blockchain data as a malware threat. Litecoin 0.13 will obfuscate the blockchain data to rid these false positives.

I interpret this as AV software alerting/blocking the download of blockchain data and not false positives in the wallet itself.

These might very well be all false positives in the virustotal scan, though some of the detections do not sound like the well known "bitcoinminer-XY-bla".
When you compare scans from 10.2.2 and 10.4.0 there is quite a difference in number and kind of positives:

litecoin-0.10.4.0-win32-setup.exe: https://www.virustotal.com/en/file/21783cccfb4dc9d7de8f7e902613b6c1252819e7eb4f2e7a25eacedc7ff2ecf6/analysis/
litecoin-0.10.4.0-win64-setup.exe: https://www.virustotal.com/en/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/
litecoin-0.10.2.2-win32-setup.exe: https://www.virustotal.com/en/file/395b10086ff0b8d0919d15cc0d5e8a86376926131fb3dac79313b719e37b5bdd/analysis/
litecoin-0.10.2.2-win64-setup.exe: https://www.virustotal.com/en/file/124470d116f1a93b70ba5c43a8700113ae31d997b9fdfe7cb425af4e54e43d85/analysis/

I am not in the position to judge if there is something fishy with the 10.4.0 binaries for windows, I have no windows and not much experience in nowadays virus threats but I for myself would certainly not touch the 10.4.0 windows wallet with above info at hand.

bitcoincardreview.com

newbie

Activity: 27

Merit: 0

Quote from: shyliar on August 16, 2016, 06:31:20 AM

Yes if any of you take a couple of minutes to read the 2016 roadmap it mentions plans to eliminate false positives from virus packages. I can remember the same thing happening with bitcoin and at least one alt coin i've downloaded over the years.

Always good to be cautious and check signature.

It happen with bitcoin which flag as: miner tool or something
I never seen it showed out : Trojan ...it really not usual

selfion

member

Activity: 84

Merit: 10

Quote from: Sunfire_99 on August 15, 2016, 11:44:16 AM

Use an online litecoin wallet instead . the one you installed might harm your pc ?

where online wallet is recomended not exchanger, i see litecoin dot org not remonded link wallet online

shyliar

hero member

Activity: 728

Merit: 500

Quote from: Spoetnik on August 16, 2016, 06:24:37 AM

You said "it looks" and indeed it looks like a false positives, but why are you attacking people like that? Charlie Lee has been notified and we'll see if this is normal or not. You do realize that some people (no matter what kind of noobs they are) can refrain of using the wallet because of this? Cheer up a bit...

People attacking others for just asking a technical question are the worst type of forum poster. Knowledge is acquired one step at a time and none of us finish the walk.

shyliar

hero member

Activity: 728

Merit: 500

Yes if any of you take a couple of minutes to read the 2016 roadmap it mentions plans to eliminate false positives from virus packages. I can remember the same thing happening with bitcoin and at least one alt coin i've downloaded over the years.

Always good to be cautious and check signature.

spartak_t

legendary

Activity: 1960

Merit: 1176

@FAILCommunity

Quote from: bitcoincardreview.com on August 16, 2016, 05:56:30 AM

Quote from: spartak_t on August 16, 2016, 04:47:11 AM

OP. please change the subject of the thread to something like "Is litecoin core 0.10.4.0 infected with a virus?". I believe it will engage more people, until we figure this out.

Thank for your suggestion.
I changed our topic name now

Yeah, I saw that, thanks. We may have more opinions now.

Quote from: Spoetnik on August 16, 2016, 06:24:37 AM

I dealt with this shit here before and it looks like your classic crypto wallet false positives.
hell read half the titles of the flags.

Quote

Kaspersky not-a-virus:RiskTool.Win64.BitCoinMiner.aex

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

LOL

Your all just fucking NOOBS ! hahhahah

Wallets and MINERS have been flagged like this since day 1 in Crypto.

You said "it looks" and indeed it looks like a false positives, but why are you attacking people like that? Charlie Lee has been notified and we'll see if this is normal or not. You do realize that some people (no matter what kind of noobs they are) can refrain of using the wallet because of this? Cheer up a bit...

Spoetnik

legendary

Activity: 1540

Merit: 1011

FUD Philanthropist™

I dealt with this shit here before and it looks like your classic crypto wallet false positives.
hell read half the titles of the flags.

Quote

Kaspersky not-a-virus:RiskTool.Win64.BitCoinMiner.aex

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

LOL

Your all just fucking NOOBS ! hahhahah

Wallets and MINERS have been flagged like this since day 1 in Crypto.

bitcoincardreview.com

newbie

Activity: 27

Merit: 0

Quote from: spartak_t on August 16, 2016, 04:47:11 AM

OP. please change the subject of the thread to something like "Is litecoin core 0.10.4.0 infected with a virus?". I believe it will engage more people, until we figure this out.

Thank for your suggestion.
I changed our topic name now

bitcoincardreview.com

newbie

Activity: 27

Merit: 0

Quote from: NorrisK on August 16, 2016, 04:39:12 AM

Did you / anyone inform the dev team about this?

Could be that they are unaware of this (very likely, as the download is available and not yet offline..).

Do not have idea how long this happen with them but it really risky for us who already running them on PC

psycodad

legendary

Activity: 1612

Merit: 1608

精神分析的爸

Quote from: vlom on August 16, 2016, 04:19:24 AM

Quote from: pedrog on August 16, 2016, 03:12:30 AM

It looks like the site has been compromised and is now serving an infected version of Litecoin windows client.

https://www.virustotal.com/pt/file/bb9cb2bef36311f7e7f4815dcf7696161f8775108f8767f14bd4e3330935e98d/analysis/1471334858/

this is really bad. and i think it is getting to hard to be save. because i don't know how to handle the sources on gitbub. and gitbub could be compromised too.

There have been no notable changes on github in the last months, so it is rather unlikely (I am not saying impossible!). But I agree, it's bad nonetheless.
EDIT:
~~Did anybody check the GPG sigs? For me they give a valid signature from an unknown key ID: 7809386C.~~
After learning the gpg 1-2-3 for dummies, I could verify the signature as:
gpg: Good signature from "Adrian Gallagher <[email protected]>"

spartak_t

legendary

Activity: 1960

Merit: 1176

@FAILCommunity

OP. please change the subject of the thread to something like "Is litecoin core 0.10.4.0 infected with a virus?". I believe it will engage more people, until we figure this out.

spartak_t

legendary

Activity: 1960

Merit: 1176

@FAILCommunity

The 64 bit Win version reported 13 infected out of 54 files. Just tweeted to Charlie Lee:

https://twitter.com/FAILCommunity/status/765482508544868352

Topic: Is litecoin core 0.10.4.0 infected with a virus ? - page 2. (Read 3357 times)