Virus Astropulse bitdefender

Questions and Answers : Windows : Virus Astropulse bitdefender
Message board moderation

To post messages, you must log in.

AuthorMessage
Profile moi

Send message
Joined: 25 Dec 14
Posts: 11
Credit: 411,756
RAC: 7,073
France
Message 1903914 - Posted: 30 Nov 2017, 18:35:17 UTC
Last modified: 30 Nov 2017, 18:35:47 UTC

Bidefender

L'application boinc.exe accède à une ressource web:

http://boinc2.ssl.berkeley.edu/sah/download_fanout/astropulse_7.09_windows_intelx86__opencl_intel_gpu_102.exe

Infected

Nom du virus : Cloud.Malware.11875uW@bOlk0Jfi. Cette ressource web a bien été bloquée et votre PC est désormais protégé.
So i dont work on this
ID: 1903914 · Report as offensive     Reply Quote
Profile Mr. Kevvy
Volunteer moderator
Volunteer tester
Avatar

Send message
Joined: 15 May 99
Posts: 1808
Credit: 401,247,484
RAC: 387,209
Canada
Message 1903929 - Posted: 30 Nov 2017, 19:46:41 UTC
Last modified: 30 Nov 2017, 19:49:30 UTC

It is blocking boinc.exe for "accessing a web resource" which means that it didn't like it was trying to download an executable file, rather than the content of the file itself, which BOINC will of course do to keep itself and its projects updated. Note that it is downloading from boinc2.ssl.berkeley.edu not a malware site.

How to whitelist in BitDefender
“Never doubt that a small group of thoughtful, committed citizens can change the world; indeed, it's the only thing that ever has.”
--- Margaret Mead

ID: 1903929 · Report as offensive     Reply Quote
Profile Luckdragon82
Volunteer tester

Send message
Joined: 14 Jul 05
Posts: 2
Credit: 3,104,228
RAC: 3,122
United States
Message 1904336 - Posted: 2 Dec 2017, 7:54:42 UTC

I may have found your issue! I just detected a virus within your program. I wasn't able to post a screen-cap, but was able to copy/past what Bitdefender said was the name of the program:

Infected web resource detected
5 minutes ago

Feature:
Web Protection

The application boinc.exe accesses a web resource http://boinc2.ssl.berkeley.edu/sah/download_fanout/astropulse_7.10_windows_intelx86__opencl_nvidia_100.exe that has been detected as infected. Virus name: Cloud.Malware.11875uW@bqaTN8ai. The web resource has been successfully blocked and your PC is now safe.[/img]
ID: 1904336 · Report as offensive     Reply Quote
Grant (SSSF)
Volunteer tester

Send message
Joined: 19 Aug 99
Posts: 9179
Credit: 118,672,239
RAC: 49,715
Australia
Message 1904337 - Posted: 2 Dec 2017, 7:56:02 UTC - in response to Message 1904336.  

I may have found your issue! I just detected a virus within your program. I wasn't able to post a screen-cap, but was able to copy/past what Bitdefender said was the name of the program:

Infected web resource detected
5 minutes ago

Feature:
Web Protection

The application boinc.exe accesses a web resource http://boinc2.ssl.berkeley.edu/sah/download_fanout/astropulse_7.10_windows_intelx86__opencl_nvidia_100.exe that has been detected as infected. Virus name: Cloud.Malware.11875uW@bqaTN8ai. The web resource has been successfully blocked and your PC is now safe.[/img]

False positive.
Grant
Darwin NT
ID: 1904337 · Report as offensive     Reply Quote
Profile Luckdragon82
Volunteer tester

Send message
Joined: 14 Jul 05
Posts: 2
Credit: 3,104,228
RAC: 3,122
United States
Message 1904338 - Posted: 2 Dec 2017, 7:57:37 UTC - in response to Message 1904337.  

Can you clarify, please?
ID: 1904338 · Report as offensive     Reply Quote
Grant (SSSF)
Volunteer tester

Send message
Joined: 19 Aug 99
Posts: 9179
Credit: 118,672,239
RAC: 49,715
Australia
Message 1904339 - Posted: 2 Dec 2017, 7:59:57 UTC - in response to Message 1904338.  

Can you clarify, please?

Your AV programme is wrong, there is no infection.
Grant
Darwin NT
ID: 1904339 · Report as offensive     Reply Quote
Thor_Konnat

Send message
Joined: 10 Jul 11
Posts: 1
Credit: 293,326
RAC: 1,352
Germany
Message 1904436 - Posted: 2 Dec 2017, 16:56:05 UTC

Hi,
My System
Windows 10 64bit Creator with Bitdefender Total Security 2018.
Bitdefender shows me a virus. It should be the "Cloud.Malware.11872OW@byOvLxgi". Accessed: "http://boinc2.ssl.berkeley.edu/sah/download_fanout/setigraphics_8.05_windows_x86_64.exe". In addition, boinc.scr is detected as malware.
Who can help me?
Sorry about the pronunciation, but google has translated.
:-)

Rolf
ID: 1904436 · Report as offensive     Reply Quote
Tom Veik

Send message
Joined: 14 May 99
Posts: 2
Credit: 1,872,158
RAC: 6,140
United States
Message 1905019 - Posted: 6 Dec 2017, 3:55:20 UTC

This didn't seem to fit in any of the other forums so putting it here. I just enabled Astropulse recently and now get notices from Bit Defender like shown below. I'm assuming this is a false positive. I wonder if I can white list this somehow. The filename varies though.


Infected web resource detected
Yesterday at 8:17 AM

Feature:
Web Protection

The application boinc.exe accesses a web resource http://boinc2.ssl.berkeley.edu/sah/download_fanout/astropulse_7.09_windows_intelx86__opencl_intel_gpu_102.exe that has been detected as infected. Virus name: Cloud.Malware.11875uW@bOlk0Jfi. The web resource has been successfully blocked and your PC is now safe.
ID: 1905019 · Report as offensive     Reply Quote
Tom Veik

Send message
Joined: 14 May 99
Posts: 2
Credit: 1,872,158
RAC: 6,140
United States
Message 1905020 - Posted: 6 Dec 2017, 4:04:39 UTC

I'm getting these notices from Bitdefender too about Astropulse. Will try the white list option.
ID: 1905020 · Report as offensive     Reply Quote

Questions and Answers : Windows : Virus Astropulse bitdefender


 
©2018 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.