Einstein component detected as VIRUS (Suspicious.Lop)
9 Apr 2009 11:21:27 UTC
Topic 194279
(moderation:
Norton Internet Security 2009 has just recognised an Einstein@Home component as a Heuristic Virus, risk name: Suspicious.Lop.
The file name is: einstein_s5r5_3.01_graphics_windows_intelx86.exe
The file path is: C:\programdata\boinc\projects\einstein.phys.uwm.edu\
I'm sure it isn't a virus but it might be worthwhile discussing this false positive with Symantec.
David Adams.
Einstein component detected as VIRUS (Suspicious.Lop)
)
For what it's worth, Trend Micro Internet Security 2008 has no problem.
Cheers, Mike.
I have made this letter longer than usual because I lack the time to make it shorter ...
... and my other CPU is a Ryzen 5950X :-) Blaise Pascal
So what? This file infected
)
So what? This file infected or not?
RE: So what? This file
)
AVG with all updates on the only Windows XP host I own says it's infected.
AVG with all updates on my buddy's Win XP machine (it doesn't crunch but I sent him the file) doesn't complain. No BS!
Seems like the answer to the "Is it infected?" question depends on who you ask, perhaps even when you ask them. Is that special relativity or general mayhem?
Follow Ageless' suggestion in that other thread... ask all the authorities at once and go with the majority. You may want to ask them again tomorrow.
BOINC FAQ Service
Official BOINC wiki
Installing BOINC on Linux
The original file was
)
The original file was uploaded to a scanning service and not one of the scanners detected a problem:
https://www.virustotal.com/analisis/65ebdea88d3bb22613e60c719d4b2459.
CU
Bikeman
RE: The original file was
)
As I posted in this post, it is the autodetection software that heuristically detects the file 'while it's active'. IOW, it detects it's behaviour as malware like.
This is most likely a false positive, but it will be good to see why Symantec has ID it specifically.
Harvey
Harvey, Thanks for
)
Harvey,
Thanks for investigating and sharing that info. Now I'm convinced it's not a virus/malware. It just happens to make a noise that sounds like a virus to certain detection software(s).
BOINC FAQ Service
Official BOINC wiki
Installing BOINC on Linux