- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
We have stopped an application from running called BoardTestSystem32.exe. The binary was located in the directory: C:\altera\14.1\kits\arriaVST_5astfd5kf40_soc_orig\examples\board_test_system\BoardTestSystem32.exe The reason why we blocked this binary is because the SHA256 value of this binary matches a common virus on virus total SHA256:05bb1b4d1f53c8bb737fb03904a2b04822bdabd9ba17c4c240f408432a7d9a5f https://www.virustotal.com/en/file/05bb1b4d1f53c8bb737fb03904a2b04822bdabd9ba17c4c240f408432a7d9a5f/analysis/ We know that we have several users using Altera and we wanted to double check that this binary is indeed your binary as it is unsigned and has a poor reputation on virus total. Can someone validate that this is indeed a trusted payload? I will be analyzing this in a sandbox environment, but would like some input from the community here. Cordially, TimLink Copied
1 Reply
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I don't know about that particular executable for that dev kit. However, I am aware that a number of these board test system executables, for other dev kits, have caused my anti-virus software to highlight them, as you found. I suspect there is a common segment of code in all of them that is being identified.
I have chosen to add an exception for each one and continued to run them, successfully. I'm unaware of any untoward behaviour from any of the PCs I use. Note: I offer this as an observation only and not with any guarantee that your executable does not contain a virus! Cheers, Alex
Reply
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page