Topic: VIRUS IN ~ CANDLE ~ .EXE Are we surprised? (Read 2179 times)
i would not trust virus total, i remember with fuck coin or other coin there can be a zero day virus, which will not be detected
if you're worried you can try to run on a virtual machine
Many scammers use the "free coin" thing to inject viruses through wallets...... 
Not really surprised at this if it is a dodgy wallet, this is one of the reasons I have stopped looking in the altcoin section, it has just become a hotbed for scams and virus contained wallets, not many honest projects being released apart from the odd one or two.
Click additional information from OP exe link.
14 Mb exe. OP is a troll.
14 Mb exe. OP is a troll.
Nope, the dev purposely swap the original clean file with infected file from mega. How would I know? The exe file I downloaded at work was clean but when I redownloaded it again at home it was totally infected. It was on the same OP of the official thread.
I downloaded wallet since thread creation, then when this topic appears I redownloaded wallet and checksum the same... I don't know where you found another wallet, now seems thread does not exist anymore. So maybe it is dead.
Click additional information from OP exe link.
14 Mb exe. OP is a troll.
14 Mb exe. OP is a troll.
Nope, the dev purposely swap the original clean file with infected file from mega. How would I know? The exe file I downloaded at work was clean but when I redownloaded it again at home it was totally infected. It was on the same OP of the official thread.
Click additional information from OP exe link.
14 Mb exe. OP is a troll.
14 Mb exe. OP is a troll.
Candlecoin windows binary is infected, different hash than presented in their thread. I know there are false positives in wallets, but Malwarebytes just took about 10 virusues off my crashbox, it was previously clean.
rar: HEUR/QVM03.0.Malware.Gen
https://www.virustotal.com/en/file/6dc0bbad7bf9fb63f8377045b9fa3bf268eace72f024592fbdb1eedd82f91f3e/analysis/1448121325/
.exe: Dropper/Win32.Agent
https://www.virustotal.com/en/file/50aa309e434155d422b886a3be9aff9ab2d02f4916d804f5ca5f2c7e11f192ce/analysis/
rar: HEUR/QVM03.0.Malware.Gen
https://www.virustotal.com/en/file/6dc0bbad7bf9fb63f8377045b9fa3bf268eace72f024592fbdb1eedd82f91f3e/analysis/1448121325/
.exe: Dropper/Win32.Agent
https://www.virustotal.com/en/file/50aa309e434155d422b886a3be9aff9ab2d02f4916d804f5ca5f2c7e11f192ce/analysis/
just run a new test. it seems clean though.
https://www.virustotal.com/en/file/24a4b22f96711ae297b986dfb5fedf930a234d2a44dc75a0afd8cbe49b18adf1/analysis/1448151472/
No surprise - I told them in thread beware of viruses with encryption can defeat av scanners
-samsunk
-samsunk
The file i got yesterday is clean too, and different checksum etc than op of this thread :S
not saying there's nothing hidden in it, i'm no expert, but malwarebytes and virustotal tell me mine is clean :S
ZIP
https://www.virustotal.com/en/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448126500/
QT
https://www.virustotal.com/en/file/24a4b22f96711ae297b986dfb5fedf930a234d2a44dc75a0afd8cbe49b18adf1/analysis/1448126126/
i'll hold off on installing it for now
not saying there's nothing hidden in it, i'm no expert, but malwarebytes and virustotal tell me mine is clean :S
ZIP
https://www.virustotal.com/en/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448126500/
QT
https://www.virustotal.com/en/file/24a4b22f96711ae297b986dfb5fedf930a234d2a44dc75a0afd8cbe49b18adf1/analysis/1448126126/
i'll hold off on installing it for now
I have the same checksum.
OP is a troll.
The file i got yesterday is clean too, and different checksum etc than op of this thread :S
not saying there's nothing hidden in it, i'm no expert, but malwarebytes and virustotal tell me mine is clean :S
ZIP
https://www.virustotal.com/en/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448126500/
QT
https://www.virustotal.com/en/file/24a4b22f96711ae297b986dfb5fedf930a234d2a44dc75a0afd8cbe49b18adf1/analysis/1448126126/
i'll hold off on installing it for now
not saying there's nothing hidden in it, i'm no expert, but malwarebytes and virustotal tell me mine is clean :S
ZIP
https://www.virustotal.com/en/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448126500/
QT
https://www.virustotal.com/en/file/24a4b22f96711ae297b986dfb5fedf930a234d2a44dc75a0afd8cbe49b18adf1/analysis/1448126126/
i'll hold off on installing it for now
Downloaded from Candle thread now, my wallet has same checksums.
Where OP has downloaded exe with different checksums?
Where OP has downloaded exe with different checksums?
OP has other checksum.
This is exactly why we launched Steps Stay Safe, our online facility is there for miners and holders of new coins to make sure wallets is clean before you download it to your computer.
https://altcoinsteps.com/staySafe
Interesting. How do you check it? VM?
Just downloaded the wallet from the OP.
https://www.virustotal.com/bg/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448125705/
0/55
MD5 d13bdfd57d28108c5efea5562e69304d
SHA1 230bc9e3c8a151189167644a5d56210bc7ed2eb4
SHA256 35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494
Also checked wit HEX editor. Seems like no hidden exe there.
Note: seems like MD5 & SHA are different from initial qt-wallet.
Note2: Initial and present wallet are .zip @LiteMine wallet is .rar
https://www.virustotal.com/bg/file/35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494/analysis/1448125705/
0/55
MD5 d13bdfd57d28108c5efea5562e69304d
SHA1 230bc9e3c8a151189167644a5d56210bc7ed2eb4
SHA256 35845506d49504d9744e7abcee721951ca2baf3a5cd7a188706e8d64e98ed494
Also checked wit HEX editor. Seems like no hidden exe there.
Note: seems like MD5 & SHA are different from initial qt-wallet.
Note2: Initial and present wallet are .zip @LiteMine wallet is .rar
Quote
Are we surprised?
ehm no ^^ thats why i prefer to compile the wallets on my own system
OP has other checksum.
This is exactly why we launched Steps Stay Safe, our online facility is there for miners and holders of new coins to make sure wallets is clean before you download it to your computer.
https://altcoinsteps.com/staySafe
This is a really cool initiative! I'll check this out later when I have time.
OP has other checksum.
This is exactly why we launched Steps Stay Safe, our online facility is there for miners and holders of new coins to make sure wallets is clean before you download it to your computer.
https://altcoinsteps.com/staySafe
Interesting. How do you check it? VM?
It's a self mod topic... biiig Red flag
OP has other checksum.
Jump to: