WARNING Norton antivirus warming

BCC

New Member
Mar 3, 2017
1
0
1
41
I received a warning from my Norton antivirus that it found a virus in your wallet setup I downloaded from your website. I have not used the wallet nor will I until I hear from you. The virus was Trojan.Gen.8

I want to hear from you please.
 

lynx

Active Member
Dec 11, 2015
364
250
133
Which wallet? Where did you download it from? Which version? Did you verify the signature? What's the file sha256 hash? Are you sure it's not your computer that is infected? When in doubt, you can always build it entirely from source...
 

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
did u email us as well ?
screenshot please ! tx
 

tungfa

Grizzled Member
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,902
6,737
1,283
he emailed me too - multiple times + posted in electrum section

i am still waiting for a screenshot and more details what wallet we are talking about here
(i never heard of any of this ever before - need some proof )
 

mjglqw

New Member
Mar 4, 2017
2
1
3
26
are you sure you downloaded it from the right source though? and not some random user?
 

UdjinM6

Official Dash Dev
Core Developer
Dash Core Team
May 20, 2014
3,639
3,537
1,183
I believe Norton is just way to suspicious and it’s a false positive.
https://www.virustotal.com/en/file/...c848e3295fab139f7f614693/analysis/1488605612/
https://www.virustotal.com/en/file/...118bfee62c2396cb4fd497b4/analysis/1488604337/

Make sure that the hash of the file matches the hash you can find in “Hash File” on https://www.dash.org/wallets/#wallets page i.e.
https://github.com/dashpay/dash/releases/download/v0.12.1.3/SHA256SUMS.asc

Code:
0f0cf51013589e0bf7060c7ac1deae5368e3b5d88422f66e949e57cc75285e13 dashcore-0.12.1.3-win32.zip
ef6f0c2e057724f3c897a0e1802758b6b66e6901118bfee62c2396cb4fd497b4 dashcore-0.12.1.3-win32-setup.exe
a2c35335491c2747515ab002935966002339671a3566b5adeeedb0d012bcf0cc dashcore-0.12.1.3-win64.zip
2dd1c38e6caa9e4bcb7ed8d010e3b95eb2ceea42c848e3295fab139f7f614693 dashcore-0.12.1.3-win64-setup.exe
If they don’t, you probably have corrupted file or file was modified after you downloaded it.
If the do match however, you should be good.

EDIT: threads merged
 
Feb 25, 2017
165
12
78
I believe Norton is just way to suspicious and it’s a false positive.
https://www.virustotal.com/en/file/...c848e3295fab139f7f614693/analysis/1488605612/
https://www.virustotal.com/en/file/...118bfee62c2396cb4fd497b4/analysis/1488604337/

Make sure that the hash of the file matches the hash you can find in “Hash File” on https://www.dash.org/wallets/#wallets page i.e.
https://github.com/dashpay/dash/releases/download/v0.12.1.3/SHA256SUMS.asc

Code:
0f0cf51013589e0bf7060c7ac1deae5368e3b5d88422f66e949e57cc75285e13 dashcore-0.12.1.3-win32.zip
ef6f0c2e057724f3c897a0e1802758b6b66e6901118bfee62c2396cb4fd497b4 dashcore-0.12.1.3-win32-setup.exe
a2c35335491c2747515ab002935966002339671a3566b5adeeedb0d012bcf0cc dashcore-0.12.1.3-win64.zip
2dd1c38e6caa9e4bcb7ed8d010e3b95eb2ceea42c848e3295fab139f7f614693 dashcore-0.12.1.3-win64-setup.exe
If they don’t, you probably have corrupted file or file was modified after you downloaded it.
If the do match however, you should be good.

EDIT: threads merged
You guys should fix that maybe? Norton is used by a lot of people.
 

crowning

Well-known Member
May 29, 2014
1,414
1,997
183
Alpha Centauri Bc
but why is it showing? :'(
That's quite simple and not only a problem for Dash, but for most crypto-currencies:

back in those days™ when mining via CPU/GPU was still profitable some people added code to the wallets to a) either secretly mine with your wallet and send the rewards to an address of their own, or b) waited until you mine on your own, but still sent the rewards to an address of their own, or c) abused your PC for something else.

At that time most mining software (and the wallet itself can be used for mining as well) ended in the virus/trojan signature database of the anti-virus companies and are still there.

And even when the signatures of the antivirus software itself was updated in some cases, the heuristics they use to find unknown viruses/trojans still classify most wallets as trojans because they fulfill some criteria of trojans:
- communicate via a P2P network
- open some ports to communicate via RPC
- encrypt most of the communication

Just do as @UdjinM6 told you above, only(!) download the Dash wallet from the official place (https://www.dash.org/downloads/) and compare the hashes provided there with your downloaded wallet.
 
Feb 25, 2017
165
12
78
That's quite simple and not only a problem for Dash, but for most crypto-currencies:

back in those days™ when mining via CPU/GPU was still profitable some people added code to the wallets to a) either secretly mine with your wallet and send the rewards to an address of their own, or b) waited until you mine on your own, but still sent the rewards to an address of their own, or c) abused your PC for something else.

At that time most mining software (and the wallet itself can be used for mining as well) ended in the virus/trojan signature database of the anti-virus companies and are still there.

And even when the signatures of the antivirus software itself was updated in some cases, the heuristics they use to find unknown viruses/trojans still classify most wallets as trojans because they fulfill some criteria of trojans:
- communicate via a P2P network
- open some ports to communicate via RPC
- encrypt most of the communication

Just do as @UdjinM6 told you above, only(!) download the Dash wallet from the official place (https://www.dash.org/downloads/) and compare the hashes provided there with your downloaded wallet.
Ahhh I see, thanks :)
 

Eva22

New Member
Mar 22, 2017
3
1
3
24
Here is the latest article that I've read on the topic of the spread of viruses