Programmable Devices
CPLDs, FPGAs, SoC FPGAs, Configuration, and Transceivers
21592 Discussions

Possible virus BoardTestSystem32.exe

Altera_Forum
Honored Contributor II
1,108 Views

Hello, 

 

We have stopped an application from running called BoardTestSystem32.exe. The binary was located in the directory: 

C:\altera\14.1\kits\arriaVST_5astfd5kf40_soc_orig\examples\board_test_system\BoardTestSystem32.exe  

 

The reason why we blocked this binary is because the SHA256 value of this binary matches a common virus on virus total 

SHA256:05bb1b4d1f53c8bb737fb03904a2b04822bdabd9ba17c4c240f408432a7d9a5f 

 

https://www.virustotal.com/en/file/05bb1b4d1f53c8bb737fb03904a2b04822bdabd9ba17c4c240f408432a7d9a5f/analysis/ 

 

We know that we have several users using Altera and we wanted to double check that this binary is indeed your binary as it is unsigned and has a poor reputation on virus total. 

 

Can someone validate that this is indeed a trusted payload? I will be analyzing this in a sandbox environment, but would like some input from the community here. 

 

Cordially, 

 

Tim
0 Kudos
1 Reply
Altera_Forum
Honored Contributor II
417 Views

I don't know about that particular executable for that dev kit. However, I am aware that a number of these board test system executables, for other dev kits, have caused my anti-virus software to highlight them, as you found. I suspect there is a common segment of code in all of them that is being identified. 

 

I have chosen to add an exception for each one and continued to run them, successfully. I'm unaware of any untoward behaviour from any of the PCs I use. 

 

Note: I offer this as an observation only and not with any guarantee that your executable does not contain a virus! 

 

Cheers, 

Alex
0 Kudos
Reply