pyronaut Posted March 9, 2022 Share Posted March 9, 2022 I downloaded ImgBurn from the first link on the download page (Digital Digest) and when I tried to run it my virus scanner when nuts. I also scanned it on virustotal (link) and it returned a lot of hits for malicious content. One red flag is that the file was called "ImgBurn.exe" as opposed to having the version in the name like it usually does. I then got the file directly from the ImgBurn web site and it was called SetupImgBurn_2.5.8.0.exe, which was more like what I expected. It return no hits on virustotal. I don't want others to get infected by this so I want to report it to the creator. Anyone know how to do that? Link to comment Share on other sites More sharing options...
dbminter Posted March 9, 2022 Share Posted March 9, 2022 You'd have to contact the host itself, if they even care. There's only host you can trust and that's the ImgBurn based one. Everyone else gets an untouched file, but they usually add their own PUP's. While not viruses, they're Potentially Unwanted Programs that can get installed if you get click happy. Link to comment Share on other sites More sharing options...
pyronaut Posted March 9, 2022 Author Share Posted March 9, 2022 I see. I would have imagined that the owners of the ImgBurn site wouldn't want links on their site pointing to files with malicious software (as reported by 28 vendors according to VirusTotal) and ruining the reputation of their software. I didn't get to the installer as my virus scanner shut it down before I could open it, so I can't say if it was just added content to the installer. The installer was quite a bit bigger than the original though. I don't know if the host would do anything if they added it themselves, so I guess it ends here. Thanks for the explanation. Link to comment Share on other sites More sharing options...
dbminter Posted March 9, 2022 Share Posted March 9, 2022 Most likely, most of those "malicious" positives are for PUP's, which aren't viruses. Most AV software is simply coded too hard and treats PUP's as viruses, even though they're not. Unfortunately, whatever LUK does is just hand off the files. It's the hosts who poison them and he can't do much about it. Granted, I'd think it would best to remove all the hosts from the download page and just offer the unobstructed installer from the lone ImgBurn host. It's the only host I ever get my files from, too. Link to comment Share on other sites More sharing options...
Recommended Posts