search

Git-Jiro / homebrew-jiro

This repository contains homebrew formulae authored by me
26 stars 11 forks source link

4.0.1: Infected executable #71

Closed chuckcoleman closed 4 years ago

chuckcoleman commented 5 years ago

This just popped up from my antivirus. screen shot 2019-01-01 at 10 51 15 am

Git-Jiro commented 5 years ago

Yes, I have had a similar report from someone else with another version of the Gridcoin-Client and another Anti-Virus Software. The message is not completely wrong though: Gridcoin DOES have some shared origins with BitCoin. I guess that is the reason why these false alarms will keep appearing from time to time. Unfortunately I have no idea what could be done against those false alarms.

chuckcoleman commented 5 years ago

Better a false positive than a false negative. I suspect there's some shared binary code that is the BTC miner's signature in the scanners. On Wednesday, January 2, 2019, 12:01:40 PM EST, Martin Schimandl notifications@github.com wrote:

Yes, I have had a similar report from someone else with another version of the Gridcoin-Client and another Anti-Virus Software. The message is not completely wrong though: Gridcoin DOES have some shared origins with BitCoin. I guess that is the reason why these false alarms will keep appearing from time to time. Unfortunately I have no idea what could be done against those false alarms.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

chuckcoleman commented 5 years ago

I lost access to Gridcoin, so I had to turn off the real-time file scanning and exclude it from system scans. Now, it's running fine.

A fix may be to put some useless code in the shared section(s). Something like incrementing a superfluous variable.

Git-Jiro commented 5 years ago

Unfortunately adding some superfluous code won't help. You never know what kind of signatures all the different antivirus vendors are going to use.