Thread 'Just Received Virus Warning About BOINC.EXE'

Message boards : Questions and problems : Just Received Virus Warning About BOINC.EXE
Message board moderation

To post messages, you must log in.

AuthorMessage
John

Send message
Joined: 13 Jan 15
Posts: 1
United States
Message 59609 - Posted: 13 Jan 2015, 17:23:05 UTC
Last modified: 13 Jan 2015, 17:28:45 UTC

BOINC.exe just tried to download trojan.gen2.

Reference file was hadam3p_afr_7.22_windows_intelx86.exe
ID: 59609 · Report as offensive
ProfileJord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15640
Netherlands
Message 59610 - Posted: 13 Jan 2015, 17:40:06 UTC - in response to Message 59609.  
Last modified: 13 Jan 2015, 17:41:04 UTC

In 99.99% of the cases this is a false positive, because the anti-virus product finds that some routine in the project's science application looks suspicious.
Which is why we advise people to exclude their BOINC Data directory from being actively scanned by anti-virus and other anti-malware products and to only scan the data directory with BOINC not running.

When you tell which AV product you use, someone will be able to tell you how to exclude BOINC its data directory from being scanned by it.
If you do not trust it, you can check through https://www.virustotal.com/ if it's only you or if it's also found to be affected by their list of 50+ scanners.
Also report this on the project's forums, in this case it looks like ClimatePrediction.net.

In the 0.01% chance it is infected, it usually got infected on your system.
Both BOINC and the project's servers run Linux, not impossible to infect by outside forces, but highly unlikely.

Edit: I have written down for a lot of AV products how to exclude the data directory.
ID: 59610 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5149
United Kingdom
Message 59615 - Posted: 13 Jan 2015, 18:08:13 UTC - in response to Message 59609.  

BOINC.exe just tried to download trojan.gen2.

Reference file was hadam3p_afr_7.22_windows_intelx86.exe

This particular file has already been discussed in a Climate Prediction message board thread, although unfortunately the poster mis-judged which thread to discuss it in.

Have a look in Scheduler process down?
ID: 59615 · Report as offensive

Message boards : Questions and problems : Just Received Virus Warning About BOINC.EXE

Copyright © 2025 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.