Pages:
Author

Topic: VIRUS IN ~ CANDLE ~ .EXE Are we surprised? (Read 2144 times)

legendary
Activity: 2590
Merit: 1022
Leading Crypto Sports Betting & Casino Platform
November 24, 2015, 10:32:33 AM
#24

i would not trust virus total, i remember with fuck coin or other coin there can be a zero day virus, which will not be detected
if you're worried you can try to run on a virtual machine
full member
Activity: 210
Merit: 100
November 24, 2015, 08:06:24 AM
#22
Many scammers use the "free coin" thing to inject viruses through wallets...... Sad
legendary
Activity: 1848
Merit: 1000
November 24, 2015, 07:46:41 AM
#21
Not really surprised at this if it is a dodgy wallet, this is one of the reasons I have stopped looking in the altcoin section, it has just become a hotbed for scams and virus contained wallets, not many honest projects being released apart from the odd one or two.
hero member
Activity: 574
Merit: 500
November 22, 2015, 08:33:17 PM
#20
Click additional information from OP exe link.
14 Mb exe. OP is a troll.


Nope, the dev purposely swap the original clean file with infected file from mega. How would I know? The exe file I downloaded at work was clean but when I redownloaded it again at home it was totally infected. It was on the same OP of the official thread.

I downloaded wallet since thread creation, then when this topic appears I redownloaded wallet and checksum the same... I don't know where you found another wallet, now seems thread does not exist anymore. So maybe it is dead.
full member
Activity: 190
Merit: 100
November 22, 2015, 08:29:19 PM
#19
Click additional information from OP exe link.
14 Mb exe. OP is a troll.


Nope, the dev purposely swap the original clean file with infected file from mega. How would I know? The exe file I downloaded at work was clean but when I redownloaded it again at home it was totally infected. It was on the same OP of the official thread.
hero member
Activity: 574
Merit: 500
November 21, 2015, 08:27:08 PM
#17
Click additional information from OP exe link.
14 Mb exe. OP is a troll.
sr. member
Activity: 1078
Merit: 310
November 21, 2015, 08:20:35 PM
#16
Candlecoin windows binary is infected, different hash than presented in their thread. I know there are false positives in wallets, but Malwarebytes just took about 10 virusues off my crashbox, it was previously clean.


rar:   HEUR/QVM03.0.Malware.Gen
https://www.virustotal.com/en/file/6dc0bbad7bf9fb63f8377045b9fa3bf268eace72f024592fbdb1eedd82f91f3e/analysis/1448121325/

.exe:    Dropper/Win32.Agent
https://www.virustotal.com/en/file/50aa309e434155d422b886a3be9aff9ab2d02f4916d804f5ca5f2c7e11f192ce/analysis/



just run a new test. it seems clean though. Smiley

https://www.virustotal.com/en/file/24a4b22f96711ae297b986dfb5fedf930a234d2a44dc75a0afd8cbe49b18adf1/analysis/1448151472/
member
Activity: 95
Merit: 10
November 21, 2015, 01:53:14 PM
#15
No surprise - I told them in thread beware of viruses with encryption can defeat av scanners

-samsunk
hero member
Activity: 574
Merit: 500
November 21, 2015, 01:50:39 PM
#14
The file i got yesterday is clean too, and different checksum etc than op of this thread :S

not saying there's nothing hidden in it, i'm no expert, but malwarebytes and virustotal tell me mine is clean :S

ZIP
https://www.virustotal.com/en/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448126500/

QT
https://www.virustotal.com/en/file/24a4b22f96711ae297b986dfb5fedf930a234d2a44dc75a0afd8cbe49b18adf1/analysis/1448126126/

i'll hold off on installing it for now  Wink

I have the same checksum.
OP is a troll.
hero member
Activity: 566
Merit: 500
November 21, 2015, 01:40:14 PM
#13
The file i got yesterday is clean too, and different checksum etc than op of this thread :S

not saying there's nothing hidden in it, i'm no expert, but malwarebytes and virustotal tell me mine is clean :S

ZIP
https://www.virustotal.com/en/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448126500/

QT
https://www.virustotal.com/en/file/24a4b22f96711ae297b986dfb5fedf930a234d2a44dc75a0afd8cbe49b18adf1/analysis/1448126126/

i'll hold off on installing it for now  Wink
hero member
Activity: 574
Merit: 500
November 21, 2015, 01:18:02 PM
#12
Downloaded from Candle thread now, my wallet has same checksums.
Where OP has downloaded exe with different checksums?
sr. member
Activity: 322
Merit: 250
Let's make a new altcoin environment.
November 21, 2015, 01:13:27 PM
#11
OP has other checksum.

This is exactly why we launched Steps Stay Safe, our online facility is there for miners and holders of new coins to make sure wallets is clean before you download it to your computer.

https://altcoinsteps.com/staySafe


Interesting. How do you check it? VM?
we do not download the .exe, we compile our from source and we add all new coins since lately 9 out of 10 have virus/trojan, but if you want to check/download the .exe better use WM or sandbox
legendary
Activity: 1568
Merit: 1000
Twitter @Acimirov
November 21, 2015, 01:11:41 PM
#10
Just downloaded the wallet from the OP.

https://www.virustotal.com/bg/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448125705/

0/55

MD5 d13bdfd57d28108c5efea5562e69304d
SHA1 230bc9e3c8a151189167644a5d56210bc7ed2eb4
SHA256 35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494


Also checked wit HEX editor. Seems like no hidden exe there.


Note: seems like MD5 & SHA are different from initial qt-wallet.
Note2: Initial and present wallet are .zip @LiteMine wallet is .rar
legendary
Activity: 2282
Merit: 1051
unnamed.Exchange, join the Cool Kids!!!
November 21, 2015, 01:05:54 PM
#9
Quote
Are we surprised? 


ehm no ^^  thats why i prefer to compile the wallets on my own system
legendary
Activity: 1453
Merit: 1030
November 21, 2015, 01:02:57 PM
#8
OP has other checksum.

This is exactly why we launched Steps Stay Safe, our online facility is there for miners and holders of new coins to make sure wallets is clean before you download it to your computer.

https://altcoinsteps.com/staySafe


This is a really cool initiative! I'll check this out later when I have time.
hero member
Activity: 574
Merit: 500
November 21, 2015, 01:01:24 PM
#7
OP has other checksum.

This is exactly why we launched Steps Stay Safe, our online facility is there for miners and holders of new coins to make sure wallets is clean before you download it to your computer.

https://altcoinsteps.com/staySafe


Interesting. How do you check it? VM?
legendary
Activity: 2660
Merit: 1240
November 21, 2015, 12:56:05 PM
#6
It's a self mod topic... biiig Red flag
hero member
Activity: 574
Merit: 500
November 21, 2015, 12:52:28 PM
#5
OP has other checksum.
Pages:
Jump to: