[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: BitCoin trojan lcpmncmkpr.exe in Octave Windows installer
|
From: |
Marco Atzeri |
|
Subject: |
Re: BitCoin trojan lcpmncmkpr.exe in Octave Windows installer |
|
Date: |
Fri, 05 Jun 2015 12:05:31 +0200 |
|
User-agent: |
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 |
On 6/5/2015 5:56 AM, Miroslav Novák (platiti.cz) wrote:
Hi,
I installed
ftp://ftp.gnu.org/gnu/octave/windows/octave-4.0.0_0-installer.exe. After
I started the octave, my antivirus found possible BitCoin trojan
c:\Windows\SysWOW64\lcpmncmkpr.exe launched from
Octave-4.0.0\bin\octave-gui.exe
This was confirmed by the virus total, see the results
https://www.virustotal.com/en/file/583b585078f37f5d399a228f1b8021ca0a9e904a55792281048bae9cfe0e95c1/analysis/
Does this file come from octave installation?
Regards Mirek Novák.
------------------------------------------
Ing. Miroslav Novák, Ph.D.
No.
Octave installer doesn't touch c:\Windows\SysWOW64
and does not contain any infected file.
You can test by yourself extracting all content of
octave-4.0.0_0-installer.exe
with a tool like 7-Zip and than run you Antivirus
on the extract files.
Regards
Marco