Virus Astropulse bitdefender

Questions and Answers : Windows : Virus Astropulse bitdefender
Message board moderation

To post messages, you must log in.

AuthorMessage
Profile moi

Send message
Joined: 25 Dec 14
Posts: 11
Credit: 450,224
RAC: 0
France
Message 1903914 - Posted: 30 Nov 2017, 18:35:17 UTC
Last modified: 30 Nov 2017, 18:35:47 UTC

Bidefender

L'application boinc.exe accède à une ressource web:

http://boinc2.ssl.berkeley.edu/sah/download_fanout/astropulse_7.09_windows_intelx86__opencl_intel_gpu_102.exe

Infected

Nom du virus : Cloud.Malware.11875uW@bOlk0Jfi. Cette ressource web a bien été bloquée et votre PC est désormais protégé.
So i dont work on this
ID: 1903914 · Report as offensive
Profile Mr. Kevvy Crowdfunding Project Donor*Special Project $250 donor
Volunteer moderator
Volunteer tester
Avatar

Send message
Joined: 15 May 99
Posts: 3776
Credit: 1,114,826,392
RAC: 3,319
Canada
Message 1903929 - Posted: 30 Nov 2017, 19:46:41 UTC
Last modified: 30 Nov 2017, 19:49:30 UTC

It is blocking boinc.exe for "accessing a web resource" which means that it didn't like it was trying to download an executable file, rather than the content of the file itself, which BOINC will of course do to keep itself and its projects updated. Note that it is downloading from boinc2.ssl.berkeley.edu not a malware site.

How to whitelist in BitDefender
ID: 1903929 · Report as offensive
Profile Luckdragon82
Volunteer tester

Send message
Joined: 14 Jul 05
Posts: 3
Credit: 6,873,331
RAC: 0
United States
Message 1904336 - Posted: 2 Dec 2017, 7:54:42 UTC

I may have found your issue! I just detected a virus within your program. I wasn't able to post a screen-cap, but was able to copy/past what Bitdefender said was the name of the program:

Infected web resource detected
5 minutes ago

Feature:
Web Protection

The application boinc.exe accesses a web resource http://boinc2.ssl.berkeley.edu/sah/download_fanout/astropulse_7.10_windows_intelx86__opencl_nvidia_100.exe that has been detected as infected. Virus name: Cloud.Malware.11875uW@bqaTN8ai. The web resource has been successfully blocked and your PC is now safe.[/img]
ID: 1904336 · Report as offensive
Grant (SSSF)
Volunteer tester

Send message
Joined: 19 Aug 99
Posts: 13732
Credit: 208,696,464
RAC: 304
Australia
Message 1904337 - Posted: 2 Dec 2017, 7:56:02 UTC - in response to Message 1904336.  

I may have found your issue! I just detected a virus within your program. I wasn't able to post a screen-cap, but was able to copy/past what Bitdefender said was the name of the program:

Infected web resource detected
5 minutes ago

Feature:
Web Protection

The application boinc.exe accesses a web resource http://boinc2.ssl.berkeley.edu/sah/download_fanout/astropulse_7.10_windows_intelx86__opencl_nvidia_100.exe that has been detected as infected. Virus name: Cloud.Malware.11875uW@bqaTN8ai. The web resource has been successfully blocked and your PC is now safe.[/img]

False positive.
Grant
Darwin NT
ID: 1904337 · Report as offensive
Profile Luckdragon82
Volunteer tester

Send message
Joined: 14 Jul 05
Posts: 3
Credit: 6,873,331
RAC: 0
United States
Message 1904338 - Posted: 2 Dec 2017, 7:57:37 UTC - in response to Message 1904337.  

Can you clarify, please?
ID: 1904338 · Report as offensive
Grant (SSSF)
Volunteer tester

Send message
Joined: 19 Aug 99
Posts: 13732
Credit: 208,696,464
RAC: 304
Australia
Message 1904339 - Posted: 2 Dec 2017, 7:59:57 UTC - in response to Message 1904338.  

Can you clarify, please?

Your AV programme is wrong, there is no infection.
Grant
Darwin NT
ID: 1904339 · Report as offensive
Thor_Konnat

Send message
Joined: 10 Jul 11
Posts: 1
Credit: 786,397
RAC: 0
Germany
Message 1904436 - Posted: 2 Dec 2017, 16:56:05 UTC

Hi,
My System
Windows 10 64bit Creator with Bitdefender Total Security 2018.
Bitdefender shows me a virus. It should be the "Cloud.Malware.11872OW@byOvLxgi". Accessed: "http://boinc2.ssl.berkeley.edu/sah/download_fanout/setigraphics_8.05_windows_x86_64.exe". In addition, boinc.scr is detected as malware.
Who can help me?
Sorry about the pronunciation, but google has translated.
:-)

Rolf
ID: 1904436 · Report as offensive
Tom Veik

Send message
Joined: 14 May 99
Posts: 4
Credit: 5,088,129
RAC: 14
United States
Message 1905019 - Posted: 6 Dec 2017, 3:55:20 UTC

This didn't seem to fit in any of the other forums so putting it here. I just enabled Astropulse recently and now get notices from Bit Defender like shown below. I'm assuming this is a false positive. I wonder if I can white list this somehow. The filename varies though.


Infected web resource detected
Yesterday at 8:17 AM

Feature:
Web Protection

The application boinc.exe accesses a web resource http://boinc2.ssl.berkeley.edu/sah/download_fanout/astropulse_7.09_windows_intelx86__opencl_intel_gpu_102.exe that has been detected as infected. Virus name: Cloud.Malware.11875uW@bOlk0Jfi. The web resource has been successfully blocked and your PC is now safe.
ID: 1905019 · Report as offensive
Tom Veik

Send message
Joined: 14 May 99
Posts: 4
Credit: 5,088,129
RAC: 14
United States
Message 1905020 - Posted: 6 Dec 2017, 4:04:39 UTC

I'm getting these notices from Bitdefender too about Astropulse. Will try the white list option.
ID: 1905020 · Report as offensive

Questions and Answers : Windows : Virus Astropulse bitdefender


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.