Virus or Spyware?

Message boards : Questions and problems : Virus or Spyware?
Message board moderation

To post messages, you must log in.

AuthorMessage
Marlin Borsick

Send message
Joined: 15 Jun 08
Posts: 2
United States
Message 17877 - Posted: 15 Jun 2008, 22:03:51 UTC

For the past month I've been getting notices from my antivirus and antispyware vendor that a file which is being downloaded from either you or Seti is being flagged as a virus or whatever.

The file name is libfftw3f-3-1-1a_upx.dll

I had set the AV software to ignore the risk for some time now. However in the past couple of days, this file is being downloaded again, and now my PC is showing signs of an infection losing things like the loss of multimedia, the networking icon with a red X, etc.

I have found that disabling BOINC/Seti has the effect of allowing my services to function again, so I have to consider disabling BOINC completely until this is resolved.

I would appreciate it if someone can verify that this is a legitimate file or provide me with some kind of resolution here.

Marlin
ID: 17877 · Report as offensive
Keck_Komputers
Avatar

Send message
Joined: 29 Aug 05
Posts: 304
United States
Message 17881 - Posted: 16 Jun 2008, 1:41:39 UTC

That is probably the FFT library from SETI@home. I am sligthly surprized that it ends in "upx" though. I would expect a file with that ending to be part of an optimised application and if so you should knnow that you installed it.


BOINC WIKI

BOINCing since 2002/12/8
ID: 17881 · Report as offensive
Marlin Borsick

Send message
Joined: 15 Jun 08
Posts: 2
United States
Message 17882 - Posted: 16 Jun 2008, 2:27:11 UTC

I wasn't sure where on the Seti site to post a comment. If you can give me some direction as to what forum or address to direct my problem to, I will do so. I do appreciate the thought.

I agree with you that I should have been informed of the FFT file. Seti has never, in the years that I've been running it, downloaded anything other than data for processing. The fact that it's downloading this particular file had me concerned a month ago and even more so now.

I'll look around the Seti site and see if I can get an explanation for this behavior.

Thanks,

Marlin
ID: 17882 · Report as offensive
Les Bayliss
Help desk expert

Send message
Joined: 25 Nov 05
Posts: 1654
Australia
Message 17884 - Posted: 16 Jun 2008, 5:23:05 UTC
Last modified: 16 Jun 2008, 5:24:42 UTC

I did a net search soon after the OP originally posted, but thought that I should leave it to the experts, as there were a lot of pages found.

However, one thread that I found was from SETI, nearly a year ago. This post in the thread mentions it, as well as how to get it at the time, as there were download problems.

It looks like the OP's current version of whatever AV he has, needs a bit of work so that it doesn't return a false positive.
ID: 17884 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15480
Netherlands
Message 17887 - Posted: 16 Jun 2008, 10:35:04 UTC - in response to Message 17881.  

That is probably the FFT library from SETI@home. I am sligthly surprized that it ends in "upx" though. I would expect a file with that ending to be part of an optimised application and if so you should knnow that you installed it.

John, this file is downloaded by Seti, it's not used by the optimized Seti versions. It is the Fast Fourier Transform library used by the 5.27 Seti_Enhanced application. (Why the optimized versions don't use it, I don't know).
ID: 17887 · Report as offensive

Message boards : Questions and problems : Virus or Spyware?

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.