Trojan Detected #2373
-
|
I scanned the installation file through VirusTotal, and it indicates a Trojan within the exe file. |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 2 replies
-
|
Show the screenshot of scanning results here. |
Beta Was this translation helpful? Give feedback.
-
|
I originally downloaded an older version, then searched for a clean version after it displayed the results. I went through all the newer modern versions, which are now called System Informer, and all links have a score of 0. So that is a good thing. In conclusion, the 3.225 version is good to go. |
Beta Was this translation helpful? Give feedback.
-
|
The only result on VirusTotal is from Kaspersky labeling the setup "not-a-virus" and "RiskTool"?
Kaspersky is based in Russia whom consider western developed software a security risk and labeling the project a "RiskTool" would be aimed at their local market. If the project contained spyware, malicious code or security issues then it would be labeled as such. They're also going to be removed from VirusTotal: |
Beta Was this translation helpful? Give feedback.
-
|
I understand; thank you for getting back to me. In addition, a YT content creator supplied a link to a website that looked very similar to the main website where the tool resides. I downloaded the file twice, resulting in "Trojan" in red letters. The result for a score of one is the file that I scanned and downloaded from SourceForge, not the website. The one thing that told me not to open and install the file was that the website link had a Russian creator and wording. That made me scan the first two files I downloaded from the main website. It has been reported that threat actors are posing as content creators and supplying links to specific free software that contain malware of a variety of sorts. I will find attempt to find the content creator again with the links that had the trojan result after the scan. Again, thank you for the feedback. |
Beta Was this translation helpful? Give feedback.
The only result on VirusTotal is from Kaspersky labeling the setup "not-a-virus" and "RiskTool"?
Kaspersky is based in Russia whom consider western developed software a security risk and labeling the project a "RiskTool" would be aimed at their local market. If the project contained spyware, malicious code or security issues then it would be labeled as such.
They're also going to be removed from VirusTotal:
https://oicts.bis.gov/kaspersky/
https://www.bis.gov/press-release/commerce-department-prohibits-russian-kaspersky-software-us-customers
https://www.federalregister.gov/documents/2024/06/24/2024-13532/final-determination-case-no-icts-2021-002-kaspersky-lab-inc