Quote from: achow101 on July 11, 2017, 09:58:29 PM

Quote from: Ruderalis on July 11, 2017, 12:13:38 PM

Hi everyone,

I have a question about the security of the file provided in the link at the beginning of this post, and is that after downloading the file and uploading it to virustotal.com there are five detections of malware, likewise as far as I know the sha256sum does not correspond the one provided by the same page, could someone confirm the latter, as well as ensure the reliability of the file?

The link of the analysis:
https://www.virustotal.com/es/file/3a0057e4d6ca172566a93192234ef28916cbb052db9e15997569d9c08502c49a/analysis/1499774418/

Thank's everyone !

The SHA256 of the file on virustotal matches that in the SHA256SUMS.asc file, so the download is legitimate. The executable is fine and safe. The detections on virustotal are false positives. Bitcoin Core is often flagged as a virus because it looks for a wallet.dat file (so usually considered a coin stealer) and it contains mining logic (so also considered a bitcoin miner). These are true, but are also integral to Bitcoin Core functioning properly; it is the software the makes the wallet.dat file that many viruses try to steal. It also contains logic for mining blocks, but this is only for testnet and regtest networks now. If you have verified that the sha256 of the file matches the sha256 in SHA256SUMS.asc and you have verified the PGP signature in SHA256SUMS.asc, then the file is safe and not a virus.

Sorry mate, i think i didn't do it right, cause i checked the SHA256 of the file through the terminal on linux using the sha256sum command and the result didnt' match the sha256sum.asc file, Could someone explain how to verify sha256 and PGP signatures ?, (i think it would be an important contribution for the newbies like me even if it is offtopic)