Suspicious.Lop Warning Hoch

wirsindnichtalleine
wirsindnichtalleine
Joined: 17 Oct 06
Posts: 1
Credit: 143736
RAC: 0
Topic 194281

Suspicious.Lop Warning Hoch

1 Datei
1 Browser Cach
c:\programdata\boinc\projekts\einstein.phys.uwm.edu\einstein_s5r5_3.01_graphics_windows_intelx86.exe

Bikeman (Heinz-Bernd Eggenstein)
Bikeman (Heinz-...
Moderator
Joined: 28 Aug 06
Posts: 3522
Credit: 800793154
RAC: 1221858

Suspicious.Lop Warning Hoch

See this thread.

Note that the Windows apps are actually built (cross-compiled) on Linux systems, so the files that are distributed on the project servers probably never went thru a Windows system, making an accidental infection highly unlikely.

CU
Bikeman

TomInTx
TomInTx
Joined: 2 Mar 05
Posts: 1
Credit: 1508530
RAC: 0

I have this as well.

I have this as well.

Symantec Anti Virus.

Scan type: Auto-Protect Scan
Event: Threat Found!
Threat: Suspicious.Lop
File: C:\Documents and Settings\All Users\Application Data\BOINC\projects\einstein.phys.uwm.edu\einstein_S5R5_3.01_graphics_windows_intelx86.exe
Location: C:\Documents and Settings\All Users\Application Data\BOINC\projects\einstein.phys.uwm.edu
Computer: 3PGDDGC1-D620L
User: admin
Action taken: Delete succeeded : Access denied
Date found: Thursday, April 09, 2009 10:57:36 AM

Neil Eisermann
Neil Eisermann
Joined: 20 May 08
Posts: 1
Credit: 1216399
RAC: 0

Me 3. Level High Title

Me 3.

Level High
Title Auto-Protect had detected Suspicious.Lop
Status Blocked

On my machine this started today. You may want to check with Symantec, or may start to loss a lot of participants.

Harvey
Harvey
Joined: 12 Dec 06
Posts: 4
Credit: 73652
RAC: 0

I've just sent 3 files tagged

Message 92351 in response to message 92349

I've just sent 3 files tagged with the Suspicious.lop trojan to Symantec.

On Symantec's site (http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2009-032722-5015-99&tabid=2) they indicate that this is a heuristic discovery that tags a file as exibiting characteristics like malware that may have been morphed or altered. If I am correct in my observations here, it is the screen saver that has been tagged.

einstein_s5r3_3.01_graphics_windows_intelx86.exe
einstein_s5r3_4.26_graphics_windows_intelx86.exe
einstein_s5r3_6.10_graphics_windows_intelx86.exe

So what Symantec tells us there is that this behaves like a threat even though it may not be. Hopefully that is the case.

Harvey

David
David
Joined: 19 Apr 06
Posts: 2
Credit: 3364830
RAC: 0

Norton alerted me to the

Norton alerted me to the Suspicious.Lop, a heuristic virus, as having been removed from a file. The file and location was identified as: "c:\documentsand settings\user\projects\einsein.phys.uwm.edu\einstein_S5rs_3.01_graphics_windows_intelx86.exe" It was reported to Norton on 10 April 2009 @ 06:06:41 GMT.

And your response is???

Jord
Joined: 26 Jan 05
Posts: 2952
Credit: 5893653
RAC: 0

RE: And your response

Message 92353 in response to message 92352

Quote:
And your response is???


Did you read the thread before you posted in it? More specifically Bikeman's answer in this thread?

Did you read any of the other threads, here and here?

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.