IMPORTANT: App flagged as Ransomware
log in

Advanced search

Message boards : Number crunching : IMPORTANT: App flagged as Ransomware

Author Message
KWSN Sir Clark
Send message
Joined: 7 Oct 15
Posts: 2
Credit: 19,351
RAC: 27
United Kingdom
Message 1181 - Posted: 2 Nov 2017, 8:35:47 UTC

Hi,

The fma app has been flagged up as ransomware and removed by MalwareBytes.

I've now added an exclusion for the BOINC folder.

https://www.imageupload.co.uk/image/EKlb

Profile valterc
Project administrator
Project tester
Send message
Joined: 30 Oct 13
Posts: 320
Credit: 16,289,224
RAC: 4,133
Italy
Message 1183 - Posted: 2 Nov 2017, 15:20:24 UTC - in response to Message 1181.
Last modified: 2 Nov 2017, 15:22:13 UTC

Hi,

The fma app has been flagged up as ransomware and removed by MalwareBytes.

I've now added an exclusion for the BOINC folder.

https://www.imageupload.co.uk/image/EKlb

I compiled it by myself from our source code, many months ago. I'm quite sure that it doesn't contain any malicious code. Anyway, a scan using VirusTotal gave the following results (https://www.virustotal.com/it/file/5e90d85043a707be0d38f657d703d09c90b63dd944b742820085220203873e5a/analysis/1509635813/)

SHA256: 5e90d85043a707be0d38f657d703d09c90b63dd944b742820085220203873e5a Nome del file: gene_pcim_v1.02_win64__fma.exe Rapporto rilevamento: 0 / 67 Data analisi: 2017-11-02 15:16:53 UTC ( 0 minuti fa )

Just (another) false positive, do not worry!

KWSN Sir Clark
Send message
Joined: 7 Oct 15
Posts: 2
Credit: 19,351
RAC: 27
United Kingdom
Message 1184 - Posted: 2 Nov 2017, 15:40:11 UTC - in response to Message 1183.
Last modified: 2 Nov 2017, 15:49:45 UTC

It does cause computation errors though as the app is moved into the virus chest and then deleted.

BOINC has to redownload the app but any Tasks being crunched are lost.

If this happens to anyone else, remember to add the exclusion.

I have reported it as false positive.


Post to thread

Message boards : Number crunching : IMPORTANT: App flagged as Ransomware


Main page · Your account · Message boards


Copyright © 2017 CNR-TN & UniTN