<p>Yes, that's very usual and expected. </p>

<p>It is not surprising to have Bitcoin-related code in Bitcoin Core(-forks), but the malware analyzers don't understand the purpose of Bitcoin code.</p>

<p>Here's a real software with a Bitcoin miner (utorrent 3.4.2): <a href="https://www.virustotal.com/#/file/0e7e8526e8c4ab3c3dc938b1bb042bda07f464390a919c7f3f30caadec156549/detection" rel="nofollow noreferrer">https://www.virustotal.com/#/file/0e7e8526e8c4ab3c3dc938b1bb042bda07f464390a919c7f3f30caadec156549/detection</a></p>

<p>The same happens for Bitcoin Core:
<img src="https://i.sstatic.net/38z2Z.png" alt=""></p>

CC BY-SA 4.0
2018-07-19T08:53:41.707Z
2018-07-19T08:53:41.707Z
MCCCS
<p>I tried to download Bitcoin cash ABC wallet from bitcoincash official site.</p>

<p>If I download zip to my computer and upload it to VirusTotal site, it says 11/62 positives.
If I go to VirusTotal site and enter the zip URL to be scanned it says it is clean.
<del>SHA-256 sum is also different.</del></p>

<p>Is this normal ? 
Maybe someone else can test ? :/</p>

<p><a href="https://download.bitcoinabc.org/0.17.2/win/bitcoin-abc-0.17.2-win64.zip" rel="nofollow noreferrer">https://download.bitcoinabc.org/0.17.2/win/bitcoin-abc-0.17.2-win64.zip</a> </p>

<p>edit: the SHA256 is the same, I initially thought it was different, maybe I compared too many at once, the main issue (warnings) remains.</p>

<p><a href="https://i.sstatic.net/M2JA4.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/M2JA4.png" alt="clean, from url"></a>
<a href="https://i.sstatic.net/XcezL.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/XcezL.png" alt="not clean, from downloaded zip"></a></p>

<bitcoin-core><client><bitcoin-cash><wallet-security><virus>
Virus warning in Bitcoin [cash] ABC client?
adrianTNT
# Virus warning in Bitcoin [cash] ABC client?

(Asked by: username_0 on 2018-07-19)

I tried to download Bitcoin cash ABC wallet from bitcoincash official site.

If I download zip to my computer and upload it to VirusTotal site, it says 11/62 positives.
If I go to VirusTotal site and enter the zip URL to be scanned it says it is clean.
~~SHA-256 sum is also different.~~

Is this normal ?
Maybe someone else can test ? :/

<https://download.bitcoinabc.org/0.17.2/win/bitcoin-abc-0.17.2-win64.zip>

edit: the SHA256 is the same, I initially thought it was different, maybe I compared too many at once, the main issue (warnings) remains.

[![clean, from url](https://i.sstatic.net/M2JA4.png)](https://i.sstatic.net/M2JA4.png)
[![not clean, from downloaded zip](https://i.sstatic.net/XcezL.png)](https://i.sstatic.net/XcezL.png)

**Tags:** bitcoin-core, client, bitcoin-cash, wallet-security, virus


---

## 1 answers

### Answer by username_1 on 2018-07-19. Score: 1

Yes, that's very usual and expected.

It is not surprising to have Bitcoin-related code in Bitcoin Core(-forks), but the malware analyzers don't understand the purpose of Bitcoin code.

Here's a real software with a Bitcoin miner (utorrent 3.4.2): <https://www.virustotal.com/#/file/0e7e8526e8c4ab3c3dc938b1bb042bda07f464390a919c7f3f30caadec156549/detection>

The same happens for Bitcoin Core:
![](https://i.sstatic.net/38z2Z.png)


---

