Virus detected in the blockchain - page 2.

Window2Wall

full member

Activity: 191

Merit: 100

Quote from: zimmah on October 04, 2014, 03:00:49 PM

Quote from: franky1 on October 04, 2014, 02:09:23 PM

Quote from: halfawake on October 04, 2014, 01:48:21 PM

I'm not sure what the right forum for this is, here, or in the Technical forum, but I figure it'll get read more here, so I'm posting here...

My computer (Windows 7 64 bit) was acting strange so I just ran a full virus scan. It detected two viruses and one of them just happened to be in the blockchain. It was detected in Bitcoin\Blocks\blk00129.dat. Those of you running full nodes, especially on Windows, this would be a good time to run a virus scanner. Avast caught this, I can't comment on any others.

i think thats a false flag.

some crap virus scanners dont detect actual viruses, they just have lists of filenames, and it happens to be that a certain old virus from the 1990's had a filename called blk00129.dat.

i kinda remember someone posting about this last year

That's a very crappy way of detecting malicious software. If you'd just rename the virus it would evade that virus scanner altogether. What a joke.

Virus scanners that scan your hard drive for viruses are pretty bad in the first place. You should have a virus scanner that blocks the download before you download it, that's way more efficient than trying to repair the damage after it is already done.

I can't believe you are running a full node and possibly a wallet on a computer without a proper virus scanner.

I don't think it is always possible to prevent a virus from being downloaded in the first place as the file could potentially be part of another file or the user could be tricked into overriding the virus scanner because they think the file is actually legit when it is not, or the virus could be introduced via some other means then being downloaded, or the virus is a 0 day attack and the virus scanner does not realize that it is a virus until after it receives an update.

Quote from: BlindMayorBitcorn on October 04, 2014, 06:52:21 PM

Quote from: HELP.org on October 04, 2014, 06:47:31 PM

It is just a piece of the virus that triggers the signature detection algorithm so it can't do anything. I ran ClamWin a couple weeks ago and it found about 5 or 6 signatures in the blockchain files in addition to the "stoned" one that gets detected by many scanners.

That thing is like a time capsule of lulz Cheesy

There are a lot of....interesting....things on the blockchain from Bitcoin's earlier days

BlindMayorBitcorn

legendary

Activity: 1260

Merit: 1116

Quote from: HELP.org on October 04, 2014, 06:47:31 PM

It is just a piece of the virus that triggers the signature detection algorithm so it can't do anything. I ran ClamWin a couple weeks ago and it found about 5 or 6 signatures in the blockchain files in addition to the "stoned" one that gets detected by many scanners.

That thing is like a time capsule of lulz Cheesy

HELP.org

hero member

Activity: 510

Merit: 500

It is just a piece of the virus that triggers the signature detection algorithm so it can't do anything. I ran ClamWin a couple weeks ago and it found about 5 or 6 signatures in the blockchain files in addition to the "stoned" one that gets detected by many scanners.

a447513372

sr. member

Activity: 336

Merit: 250

DLISK - Next Generation Coin

Quote from: An amorous cow-herder on October 04, 2014, 03:27:28 PM

Quote from: franky1 on October 04, 2014, 02:09:23 PM

some crap virus scanners dont detect actual viruses, they just have lists of filenames, and it happens to be that a certain old virus from the 1990's had a filename called blk00129.dat.

i kinda remember someone posting about this last year

Its not the filename. There actually is part of an old MS-DOS virus in the blockchain.
Fortunately its harmless.

Like it was mentioned above, you don't actually "execute" the blockchain on your computer so any virus found on the blockchain will not actually be able to do anything to your computer.

halfawake

hero member

Activity: 490

Merit: 500

Quote from: zimmah on October 04, 2014, 03:00:49 PM

That's a very crappy way of detecting malicious software. If you'd just rename the virus it would evade that virus scanner altogether. What a joke.

Virus scanners that scan your hard drive for viruses are pretty bad in the first place. You should have a virus scanner that blocks the download before you download it, that's way more efficient than trying to repair the damage after it is already done.

I can't believe you are running a full node and possibly a wallet on a computer without a proper virus scanner.

Oh, I'm not running a wallet on this computer, I don't have a proper offline setup yet, but that's the only place I'll be putting bitcoins. I just don't feel like paying for an anti-virus program that might not be any better than this one. It's not the greatest security, I acknowledge, but I'm not putting my bitcoins at risk on this computer.

Anyway, I don't think Avast is that bad a virus scanner really, but it's probably not perfect either.

An amorous cow-herder

sr. member

Activity: 322

Merit: 250

Quote from: franky1 on October 04, 2014, 02:09:23 PM

some crap virus scanners dont detect actual viruses, they just have lists of filenames, and it happens to be that a certain old virus from the 1990's had a filename called blk00129.dat.

i kinda remember someone posting about this last year

Its not the filename. There actually is part of an old MS-DOS virus in the blockchain.
Fortunately its harmless.

zimmah

legendary

Activity: 1106

Merit: 1005

Quote from: franky1 on October 04, 2014, 02:09:23 PM

Quote from: halfawake on October 04, 2014, 01:48:21 PM

I'm not sure what the right forum for this is, here, or in the Technical forum, but I figure it'll get read more here, so I'm posting here...

My computer (Windows 7 64 bit) was acting strange so I just ran a full virus scan. It detected two viruses and one of them just happened to be in the blockchain. It was detected in Bitcoin\Blocks\blk00129.dat. Those of you running full nodes, especially on Windows, this would be a good time to run a virus scanner. Avast caught this, I can't comment on any others.

i think thats a false flag.

some crap virus scanners dont detect actual viruses, they just have lists of filenames, and it happens to be that a certain old virus from the 1990's had a filename called blk00129.dat.

i kinda remember someone posting about this last year

That's a very crappy way of detecting malicious software. If you'd just rename the virus it would evade that virus scanner altogether. What a joke.

Virus scanners that scan your hard drive for viruses are pretty bad in the first place. You should have a virus scanner that blocks the download before you download it, that's way more efficient than trying to repair the damage after it is already done.

I can't believe you are running a full node and possibly a wallet on a computer without a proper virus scanner.

Bit_Happy

legendary

Activity: 2114

Merit: 1040

A Great Time to Start Something!

This is the last straw, I am selling every last Satoshi of BTC, right now. Roll Eyes

cr1776

legendary

Activity: 4130

Merit: 1307

There are virus signatures (eg 'stoned') which may be 10-15 bytes long in the blockchain. Those signatures are either purposely placed there in a transaction or random coincidences. Most probably done on purpose. They don't mean the virus is there, just a pattern is. There have been numerous discussions of this.

CrackedLogic

legendary

Activity: 1050

Merit: 1000

Quote from: halfawake on October 04, 2014, 01:48:21 PM

Avast caught this, I can't comment on any others.

It avast bro, chill. I used to get a lot of false alarms from avast. Some parts of the files can seem fishy however.

franky1

legendary

Activity: 4396

Merit: 4755

as long as you got bitcoin-core from bitcoin.org and you havnt been downloading crappy altcoin wallets or seeing them crappy "bitcoin generator" trojans on youtube, youshoud be safe.

but to be 100% sure, use the online free scans of mcafee or norton, etc to get a second opinion on the chance of you getting a virus

Meuh6879

legendary

Activity: 1512

Merit: 1012

Quote

Avast caught this

R2D221

hero member

Activity: 658

Merit: 500

Also, the blockchain is not meant to be used as an executable, so even if a virus binary is stored there, it doesn't matter.

franky1

legendary

Activity: 4396

Merit: 4755

Quote from: halfawake on October 04, 2014, 01:48:21 PM

I'm not sure what the right forum for this is, here, or in the Technical forum, but I figure it'll get read more here, so I'm posting here...

My computer (Windows 7 64 bit) was acting strange so I just ran a full virus scan. It detected two viruses and one of them just happened to be in the blockchain. It was detected in Bitcoin\Blocks\blk00129.dat. Those of you running full nodes, especially on Windows, this would be a good time to run a virus scanner. Avast caught this, I can't comment on any others.

i think thats a false flag.

some crap virus scanners dont detect actual viruses, they just have lists of filenames, and it happens to be that a certain old virus from the 1990's had a filename called blk00129.dat.

i kinda remember someone posting about this last year

halfawake

hero member

Activity: 490

Merit: 500

I'm not sure what the right forum for this is, here, or in the Technical forum, but I figure it'll get read more here, so I'm posting here...

My computer (Windows 7 64 bit) was acting strange so I just ran a full virus scan. It detected two viruses and one of them just happened to be in the blockchain. It was detected in Bitcoin\Blocks\blk00129.dat. Those of you running full nodes, especially on Windows, this would be a good time to run a virus scanner. Avast caught this, I can't comment on any others.

Topic: Virus detected in the blockchain - page 2. (Read 3559 times)