Color mixing software - trojan??

[Akuma]

Okay why is it after a couple of weeks of having this on my PC has Windows decided that this program has a dangerous trojan??? Screenshot added.

Capture.JPG (67.41 KiB) Viewed 19883 times

Someone out there trying to gain access to my PC?

Where did this program come from and why is it doing malicious stuff?

Seriously wondering.

[_kaktus_]

Hello.


It often happens that code similarity triggers such messages. Then the alarm is false.

GT team programmers should speak on this subject.

[William]

Hello.


It often happens that code similarity triggers such messages. Then the alarm is false.

GT team programmers should speak on this subject.

I will contact them and let them know this~

[Akuma]

Thanks. It seems weird that it didn't pick it up when I first installed, but 2 weeks later when I was just starting Windows.

[Akuma]

Is it because your virus software quaruntined it?
Or is it because at certain times it does indeed have a back door for malicious intent. It's funny how this thread has gone dead since pointing it out.

[_kaktus_]

Hi.


And I think we are waiting for an opinion from programmers.
After all, they have to investigate the problem.

[Akuma]

Well I'm not taking the risk and am not using this software again. The silence from GT is deafening
I trust Chinese manufacturers as much as I trust the Clintons.

[Gingko]

Sorry for late reply, please check again post:
http://www.geeetech.com/forum/viewtopic ... 92&t=61760
We have updated the MD5 code, you can verify yours and compare with it.

[Akuma]

Thank you for the reply.
I followed your link back to original source again, but not sure if this is the latest version, as it says "Created on 23 Oct" in description?

[CHans]

Hmmm, just downloaded the current version, verified the checksums and uploaded it to virustotal.com for scanning. The screenshots from the scan results are attached. One is for the entire zip file, matching the SHA-256 referred to by Gingko so the file was not infected after downloading. The other one is only for the executable file inside the zip archive.

As the program is supposed to just load an ASCII file and write out a modified one, having several scan engines detecting trojan behaviour is not really inspiring confidence. I conclude that it's either lack of competence or diligence of the programmers or actually a threat. Anyway, I won't use it...