Look what I fell over on the way! I don't believe this one either - anybody ever had any previous experience of herd protect before? A bit too keen on sponsored advertising 'solutions' for my liking.

http://www.herdprotect.com/setiathome_7.03_windows_intelx86_opencl_ati5_sah.exe-77f47fc534e526748e78f6995fb86ab8c039f6aa.aspx

All 6 that show Gen:Variant.Fosniw are using the BitDefender engine

I had to fight similar problem with one of the stock apps on Asteroids@home
that was giving 'Gen:Variant.Kazy' for some people:
http://asteroidsathome.net/boinc/forum_thread.php?id=286&postid=2922#2922

Fight was successful after I sent reports to 4-5 vendors (and I think they pushed on BitDefender)

This my post have useful link for How-to do reports to many vendors:
http://asteroidsathome.net/boinc/forum_thread.php?id=286&postid=2990#2990

---

 


- ALF - "Find out what you don't do well ..... then don't do it!" :)
 

Each release the same... some poorly-written antivirus software gives false alarms...
Next time I would put real virus in code, just to make all those ... antiviruses some favor ;D

I just downloaded the 32-bit installer from the Lunatics site on my daily driver, which runs McAfee Anti-Virus. It didn't complain during the download, didn't squawk when I scanned the executable again after the download, and didn't show any signs of indigestion when I ran the installer. All went very smoothly.

McAfee Anti-Virus and Anti-Spyware
Version: 16.8
Build: 16.8.819
Last Update: 10/13/2014
Engine Version: 2041.0
Engine creation date: 10/13/2014

Very funny :)
But then - if you wanted - you know how to scramble it (and unscramble in memory) so it will - this time - pass undetected.

Wait! - the scrambled virus will pass undetected but what about the good code? - it will be detected again ... so ... we are where we started ;)

---

 


- ALF - "Find out what you don't do well ..... then don't do it!" :)
 

Many thanks to Richard and the Lunatics team for the new installer, it went all very seamlessly for me. No alerts from McAfee etc...

Earlier this evening I installed the latest and greatest from Richard.

Just completed my first AP WU About 24 minutes for one WU on its own on a GTX 580. The WU was 1615702582, currently pending validation.

It seemed to be loading the GPU to about 90% on its own, and using between 600 and 800 MB of the 1536MB of GPU memory, so I won't run more than one at a time I think for the moment.


1403 SETI@home 13/10/2014 23:14:10 Computation for task ap_04se14aa_B0_P0_00123_20141013_29008.wu_0 finished

---

Happy Crunching,

Graham

Awhile back I had trouble with the last new v0.42 app with my older ATI cards...Will I be needing to download a special version again and if so where?

---

I Desire Peace and Justice, Jim Scott (Mod-Ret.)

Awhile back I had trouble with the last new v0.42 app with my older ATI cards...Will I be needing to download a special version again and if so where?

The AP v7 apps for ATI cards should work much better on the lower end cards. I had issues with the v0.42 GPU apps as well. At Beta many issues were resolved.

---

SETI@home classic workunits: 93,865 CPU time: 863,447 hours
Join the [url=http://tinyurl.com/8y46zvu]BP6/VP6 User Group[

Mozilla Firefox 32.0.3, and AVG 2015 (free version).
Nothing found, both files are clean.

Tim

---

I updated my three systems and only had a warning from Norton Internet Security that the file had not been downloaded very many times and I blew it off and installed without any problems.

All seems to be running fine and producing results as usual.

John

---

Could anyone who got alerts download from my site and check if you get the same please.
Just to reduce possibilities.

No problems from your site, Mike. Wether with the 32Bit nor the 64Bit Version.
Installed already the 64Bit Version. Checked with Avira.

Helli

---

A loooong time ago: First Credits after SETI@home Restart

Could anyone who got alerts download from my site and check if you get the same please.
Just to reduce possibilities.

I'm getting the same warning in Chrome as with the Lunatics download.

The only info Chrome offers is this link

https://support.google.com/chrome/answer/4412392?p=ib_download_blocked&rd=1&hl=en

Could anyone who got alerts download from my site and check if you get the same please.
Just to reduce possibilities.

I'm getting the same warning in Chrome as with the Lunatics download.

The only info Chrome offers is this link

https://support.google.com/chrome/answer/4412392?p=ib_download_blocked&rd=1&hl=en

Did it say whether it was Malicious, Uncommon, or Unwanted?

We'd expect Uncommon this soon after a release (323 downloads so far, from Lunatics and Arkayn - don't have figures for Mike's site), and it would be nothing to worry about. Malicious or Unwanted would be something to take more seriously.

Could anyone who got alerts download from my site and check if you get the same please.
Just to reduce possibilities.

I'm getting the same warning in Chrome as with the Lunatics download.

The only info Chrome offers is this link

https://support.google.com/chrome/answer/4412392?p=ib_download_blocked&rd=1&hl=en

Did it say whether it was Malicious, Uncommon, or Unwanted?

We'd expect Uncommon this soon after a release (323 downloads so far, from Lunatics and Arkayn - don't have figures for Mike's site), and it would be nothing to worry about. Malicious or Unwanted would be something to take more seriously.

I can confirm 186 downlaods of the installer so far.
Downloaded it myself with Comodo Draon, Comodo IceDragon and IE 10.
No suspicious software found with Avast and Comodo security.

---

With each crime and every kindness we birth our future.

Could anyone who got alerts download from my site and check if you get the same please.
Just to reduce possibilities.

I'm getting the same warning in Chrome as with the Lunatics download.

The only info Chrome offers is this link

https://support.google.com/chrome/answer/4412392?p=ib_download_blocked&rd=1&hl=en

Did it say whether it was Malicious, Uncommon, or Unwanted?

We'd expect Uncommon this soon after a release (323 downloads so far, from Lunatics and Arkayn - don't have figures for Mike's site), and it would be nothing to worry about. Malicious or Unwanted would be something to take more seriously.

I can confirm 186 downlaods of the installer so far.

500+ in a smidge over 24 hours. I think we'd have heard about anything genuinely dangerous by now.

I'm getting the same warning in Chrome as with the Lunatics download.

The only info Chrome offers is this link

https://support.google.com/chrome/answer/4412392?p=ib_download_blocked&rd=1&hl=en

Did it say whether it was Malicious, Uncommon, or Unwanted?

We'd expect Uncommon this soon after a release (323 downloads so far, from Lunatics and Arkayn - don't have figures for Mike's site), and it would be nothing to worry about. Malicious or Unwanted would be something to take more seriously.

Translated from Danish it says something like, this file doesn't normally get downloaded and can be dangerous.

Just in case anybody besides me is running Lunatics on a Pentium-M, I thought it might be useful to reprint the following information that Joe Segur passed along back in January. I had forgotten about it (and forgotten that I'd taken his advice) and when I ran the new installer last night, it reverted me back to the stock app, causing all the tasks in the queue to be temporarily "lost". After reinstalling the r1846 SSE2 app from the backup, I got those tasks back and running. Then, a short time ago I noticed that there's an r2549 SSE2 app available and upgraded to that one. Everything seems to be running smoothly.

For those interested, here's Joe's note:

The add-on for the installer uses CPU detection code from the x264 codec, and the authors of that codec found that the implementation of SSE on Pentium M was slower for their purposes so specifically turned off the detection. That's why the installer only offered the stock app. You may want to do a manual upgradse to the Lunatics SSE2 app, it should be about 20% better.

Could anyone who got alerts download from my site and check if you get the same please.
Just to reduce possibilities.

I'm getting the same warning in Chrome as with the Lunatics download.

The only info Chrome offers is this link

https://support.google.com/chrome/answer/4412392?p=ib_download_blocked&rd=1&hl=en

Did it say whether it was Malicious, Uncommon, or Unwanted?

We'd expect Uncommon this soon after a release (323 downloads so far, from Lunatics and Arkayn - don't have figures for Mike's site), and it would be nothing to worry about. Malicious or Unwanted would be something to take more seriously.

I can confirm 186 downlaods of the installer so far.

500+ in a smidge over 24 hours. I think we'd have heard about anything genuinely dangerous by now.

77 between the 2 versions on my site.

---

I downloaded the installer from all three sites and only one couldn't be downloaded in Chrome. Forgot which one. My AV program complains on the file at the same location from all three downloaded locations files. My AV program is Norman Security Suite 10.1. Figured it was just a false detection but had to go retrieve it from quarantine. The installation went just fine and no problems at all in the system and processing is going as expected. Even got some of the new AP V7 stuff. Haven't processed any of them yet though so nothing yet to compare to AP V6.

Here is the snippet of the detection:

Location;Diagnosis;Status;Severity
;=============================================================;;0
;Start task at 18:35:57 by user 'Keith' on machine 'KEITH-WINDOWS7';;0
;Operating System: Windows 7 64bit (SP 1);;0
;CPU: AMD FX(tm)-8350 Eight-Core Processor ;;0
;Scan area: E:\Downloads\Lunatics_Win64_v0.43_setup.exe;;0
;Command line parameter: @#@#C:\Program Files\Norman\\temp\00000789.scan ;;0
;=============================================================;;0
;Scanner engine: 7.4.4. Last update: 10/14/2014 4:34:50 AM;;0
;Total number of variants: 29962257;;0
;NVC version: 9.10.0.1018 / Aug 11 2014;;0
;NCL version: 7.4.4.0;;0
E:\Downloads\Lunatics_Win64_v0.43_setup.exe;Malware found: winpe/Suspicious_Gen5.AWBHN. Type: Malware [noname.nsis?file67];;5
E:\Downloads\Lunatics_Win64_v0.43_setup.exe;Detected as potentially unwanted program: E:\Downloads\Lunatics_Win64_v0.43_setup.exe (file);;0
E:\Downloads\Lunatics_Win64_v0.43_setup.exe;Potentially unwanted program file [] (Sandbox);;5
E:\Downloads\Lunatics_Win64_v0.43_setup.exe;Moved to quarantine: E:\Downloads\Lunatics_Win64_v0.43_setup.exe (file);;0
E:\Downloads\Lunatics_Win64_v0.43_setup.exe;Deleted during repair: E:\Downloads\Lunatics_Win64_v0.43_setup.exe (file);;0
E:\Downloads\Lunatics_Win64_v0.43_setup.exe; [16 s];File cleaned.;3;16676465
;=============================================================;;0
Scan result;;Malware found.;2
118;Objects scanned (files and items inside archives).;;0
1;Files scanned.;;0
0;Files skipped (access problems).;;0
0;Files on Exclude list excluded.;;0
16;Archive files (or archives inside archives).;;0
0;Archive files that could not be properly scanned.;;0
2;Infections found.;;0
0;Files with multiple infections found.;;0
0;Files repaired.;;0
1;Files deleted.;;0
0;Files will be deleted at next computer restart.;;0
23754149;Bytes scanned (files and archive content).;;0
23754149;Bytes found in files.;;0
;Elapsed time: 0:00:17 (hh:mm:ss);;0

Another great product from the Lunatics Team and muchly appreciated.

Cheers, Keith

---

Seti@Home classic workunits:20,676 CPU time:74,226 hours

A proud member of the OFA (Old Farts Association)

Thanks, Keith. I think that pretty much confirms what we thought.

E:\Downloads\Lunatics_Win64_v0.43_setup.exe;Malware found: winpe/Suspicious_Gen5.AWBHN. Type: Malware [noname.nsis?file67];;5
E:\Downloads\Lunatics_Win64_v0.43_setup.exe;Detected as potentially unwanted program: E:\Downloads\Lunatics_Win64_v0.43_setup.exe (file);;0
E:\Downloads\Lunatics_Win64_v0.43_setup.exe;Potentially unwanted program file [] (Sandbox);;5

'NSIS' is the Nullsoft Scriptable Install System that we use. It has the (big) advantage of being free...

But of course that means it's also free and available for the bad guys to use. Antivirus programs can't easily distinguish between 'potentially unwanted applications' and 'potentially wanted' ones.

Scan result;;Malware found.;2
118;Objects scanned (files and items inside archives).;;0
1;Files scanned.;;0
0;Files skipped (access problems).;;0
0;Files on Exclude list excluded.;;0
16;Archive files (or archives inside archives).;;0
0;Archive files that could not be properly scanned.;;0

That's the key section, and confirms that all the contents are clean - it's only the delivery system doing its job which rings alarm bells.

I've had a look through the NSIS discussion forum, and it appears to be a known, but rare, problem. The best solution appears to be buying and applying an approved digital signature - I don't know how much that would cost, but probably prohibitive for us, I'm afraid. I'll look into it.

Apart from that, it's a long and very tedious process of writing individually to each competing AV company individually (they won't collaborate, of course) and asking for the files to be checked and whitelisted. To some extent, that will happen automatically as more copies are downloaded and the files gain a 'clean' reputation.

I've had a look into the possible 'digital signature' solution, but it's looking very unlikely - the money isn't prohibitive, but the security and identity checks are very onerous.

http://www.jeff.wilcox.name/2010/02/codesigning101/

Lunatics doesn't have the sort of corporate 'legal identity' to qualify, and even as a private individual I'd need an internet domain publicly registered in my own name and address, and the ability to receive email at that domain - neither of which apply at the moment. I think we need a plan B...