v836 Posted February 1, 2022 ID:1500184 Share Posted February 1, 2022 It appears this may be a false positive: hxxps://www.colorcomputerarchive.com colorcomputerarchivecom_blocked.txt Link to post Share on other sites More sharing options...
Staff TeMerc Posted February 1, 2022 Staff ID:1500200 Share Posted February 1, 2022 25 minutes ago, v836 said: It appears this may be a false positive: hxxps://www.colorcomputerarchive.com colorcomputerarchivecom_blocked.txt 645 B · 0 downloads Hello- Active threat here: VirusTotal - URL - d0f596094f83e1949c865b4116bcc4cde34bb8c6d650da1dbc25c60dbbbeb537 Detection rate: VirusTotal - File - dd61e1c335b734ee33ddd1bf97a01ce88d414eb70f7d5119634ef30e46709646 Link to post Share on other sites More sharing options...
v836 Posted February 3, 2022 Author ID:1500373 Share Posted February 3, 2022 Yet others are equally adamant that these are false positives, affecting wimgtool.exe and wimgtool-os9.exe etc. https://github.com/VCCE/VCC/releases The source appears to be commercial software http://www.cococommunity.net/product/rainbow-ide/ and the author is well identified and is on linkedin. While it may be that it's a trojan, on balance it's more likely that this small handful of antivirus companies has made a wrong identification. The links you pointed to do not actually contain any useful information justifying the positive identification. Adding to that nobody seems to have had issues stemming from use of the single binary in question. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now