Forum Discussion

Altera_Forum's avatar
Altera_Forum
Icon for Honored Contributor rankHonored Contributor
10 years ago

Possible virus BoardTestSystem32.exe

Hello,

We have stopped an application from running called BoardTestSystem32.exe. The binary was located in the directory:

C:\altera\14.1\kits\arriaVST_5astfd5kf40_soc_orig\examples\board_test_system\BoardTestSystem32.exe

The reason why we blocked this binary is because the SHA256 value of this binary matches a common virus on virus total

SHA256:05bb1b4d1f53c8bb737fb03904a2b04822bdabd9ba17c4c240f408432a7d9a5f

https://www.virustotal.com/en/file/05bb1b4d1f53c8bb737fb03904a2b04822bdabd9ba17c4c240f408432a7d9a5f/analysis/

We know that we have several users using Altera and we wanted to double check that this binary is indeed your binary as it is unsigned and has a poor reputation on virus total.

Can someone validate that this is indeed a trusted payload? I will be analyzing this in a sandbox environment, but would like some input from the community here.

Cordially,

Tim

1 Reply

  • Altera_Forum's avatar
    Altera_Forum
    Icon for Honored Contributor rankHonored Contributor
    10 years ago

    I don't know about that particular executable for that dev kit. However, I am aware that a number of these board test system executables, for other dev kits, have caused my anti-virus software to highlight them, as you found. I suspect there is a common segment of code in all of them that is being identified.

    I have chosen to add an exception for each one and continued to run them, successfully. I'm unaware of any untoward behaviour from any of the PCs I use.

    Note: I offer this as an observation only and not with any guarantee that your executable does not contain a virus!

    Cheers,

    Alex