infection trojan in .exe rosetta !

Message boards : Number crunching : infection trojan in .exe rosetta !

To post messages, you must log in.

AuthorMessage
[af>FRANCE>44>Nantes] Einstein-Rosen-Podolsky

Send message
Joined: 14 Jul 06
Posts: 4
Credit: 425,264
RAC: 0
Message 43222 - Posted: 5 Jul 2007, 11:39:31 UTC
Last modified: 5 Jul 2007, 11:43:07 UTC


ID: 43222 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Deadmarsh

Send message
Joined: 3 Sep 06
Posts: 1
Credit: 306,748
RAC: 0
Message 43226 - Posted: 5 Jul 2007, 11:59:21 UTC

I get the same message. I'm using F-secure.
ID: 43226 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Ristus

Send message
Joined: 30 Jun 07
Posts: 1
Credit: 61,735
RAC: 0
Message 43227 - Posted: 5 Jul 2007, 12:36:55 UTC - in response to Message 43226.  

I get the same message. I'm using F-secure.

Same thing here...
ID: 43227 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Christoph Jansen
Avatar

Send message
Joined: 6 Jun 06
Posts: 248
Credit: 267,153
RAC: 0
Message 43232 - Posted: 5 Jul 2007, 13:34:16 UTC
Last modified: 5 Jul 2007, 13:35:11 UTC

Hi all,

I just went to the rosetta download site and downloaded the app in question. I checked it with an up-to-date version of G-Data Internet Security and got no positive. I of course looked up the Trojan you got and it is recognized by that antivirus program for some time now (couple of months or so).

So I'd venture to say it is a false positive. This happened to me on another BOINC app some time ago. I sent in the file to the manufacturer and two days later I got the confirmation it was clean and the false positive was mended in the next update which it then was.

But maybe you should also download the version that is currently lying on the server under https://boinc.bakerlab.org/rosetta/download/rosetta_beta_5.70_windows_intelx86.exe just to make sure it is identical with what you downloaded before and if F-Secure will issue a warning. Can't be careful enough, although it is impropable that someone temporarily exchanged it for an infected version and now changed it back.

Regards,

Christoph
ID: 43232 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Max

Send message
Joined: 30 Jan 06
Posts: 3
Credit: 203,467
RAC: 0
Message 43234 - Posted: 5 Jul 2007, 13:37:05 UTC


Reply from F-Secure:

The file you submitted is indeed clean. Our anti-virus product had a false alarm on this file earlier, however the problem is already fixed in the latest antivirus update.

ID: 43234 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
anti-cancers

Send message
Joined: 2 Sep 06
Posts: 9
Credit: 173,262
RAC: 0
Message 43236 - Posted: 5 Jul 2007, 14:05:55 UTC

if your anti-virus system found something but you think its good, i thing upload to www.virustotal.com . This page scanning this file with lots of anti-virus scanner, on web for maximum 30 minutes
ID: 43236 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile [AF>Futura Sciences>Linux] Thrr-Gilag
Avatar

Send message
Joined: 5 Mar 07
Posts: 1
Credit: 5,262
RAC: 0
Message 43303 - Posted: 6 Jul 2007, 9:34:51 UTC

One of my team member got this message too (message from KIS7)

But he got too a message from BOINC Manager when he tried to reset the project :

06/07/2007 10:29:28|rosetta@home|[file_xfer] Finished download of file abrelax_control_description.txt
06/07/2007 10:29:28|rosetta@home|[file_xfer] Throughput 97 bytes/sec
06/07/2007 10:29:53|rosetta@home|[file_xfer] Finished download of file rosetta_5.68_windows_intelx86.exe
06/07/2007 10:29:53|rosetta@home|[file_xfer] Throughput 27532 bytes/sec
06/07/2007 10:29:53|rosetta@home|[error] Signature verification error for rosetta_5.68_windows_intelx86.exe
06/07/2007 10:29:53|rosetta@home|[error] Checksum or signature error for rosetta_5.68_windows_intelx86.exe


So the checksum is wrong, and there is no update today, so we have to pay attention to be sure that's it's a false positive or not.


For virus detection, I found it there : http://esac.kaspersky.fr/index.virus.details.php?ID=163628
ID: 43303 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote

Message boards : Number crunching : infection trojan in .exe rosetta !



©2024 University of Washington
https://www.bakerlab.org