NOD32 claims to have detected a trojan (Generik.NBQFSEX) in version 0.6.6.1

[Samhayne]

Hi,

I'm super-sure it's just a false alarm but I wanted to make you aware of it anyway.
Since today NOD32 keeps quarantining my phoenixcoin wallet exe and I had to put it into the exclude list.

[ghostlander]

I'm not surprised. The wallet may use CPUminer which they have blacklisted for years.

[astr1al]

Any word from the developers on this? My old pxc wallet scans fine. Trying to get an updated version from phoenixcoin.org leads to trojan alerts.

[ghostlander]

How am I supposed to fight those false positives? They flag whatever they like for no real reason.

[tomasbrod]

The alerts might not be false. Compile the wallet from source.

[wrapperband]

Perhaps Samhayne should contact ESET Canada, and pass on the binary, to check they have been false positive someones binary.

ESET Canada Sales & Marketing Office
181 Bay Street, Suite 3620
Toronto, ON M5J 2T3
Web: www.eset.com/ca
Partner Support

To purchase ESET products and services, inquire about renewals or for assistance with credit card and other payments:

Email: salescanada@eset.ca
Call: +1 (416) 637-1470 (English/French support)
Toll Free: +1 (844) 423-3738 (English/French support)
Available Monday-Friday, 9:00am - 5:00pm EST/EDT [Toronto]

For post-sales support, including technical support:
Call: +1 (844) 423-3738

[ghostlander]

Might not be false? The binaries are hosted by GitHub. No one except me has upload rights. I don't do trojans.

By the way, most of those ignorant AVs report it a Bitcoin miner. Of course it can do some CPU mining, but not Bitcoin and not without user consent.

[Sigri44]

It's not Report to a miner, it's report to a trojan ! I have 20 wallet (with half is include with a miner), and i haven't have report in any AV. I'm suspicious from this file. Can you add a realease whithout CPUminer ? Thx

[ghostlander]

Doesn't matter. They don't like it anyway thinking it's an IRC bot. The wallet uses IRC for peer discovery only, but they don't seem to care.

[seiferflo]

Same problem here on W10. It's a shame it's not being fixed. I'll try to run the wallet on a Virtual Machine in the meantime.

[ghostlander]

Use Phoenixcoin Lite if there are problems with your anti-virus software.

[seiferflo]

Same same... but different trojan

[ghostlander]

VirusTotal 3/65

[seiferflo]

I'm using it on a Linux inside a Virtual Machine. Works fine.