[Coco] Malware in wimgtool?

[James Ross]

Just curious, does anyone know what is the origin/history of this file? Was it open-source? The closest thing I could find is that it IS/WAS a part of MESSUI? But I can’t find it on the MESSUI site.

VirusTotal.com shows 16/60 detection's (16 out of the 60 scanners flag it as a virus).  I know there are false positives quite often, but usually that would be by just one or two scanners.   Does not mean it's not, but 16 seems like a lot for a false positive. Windows Defender on my Windows 8.1 is also flagging it. 

James

________________________________________
From: Coco <coco-bounces at maltedmedia.com> on behalf of Salvador Garcia via Coco <coco at maltedmedia.com>
Sent: Wednesday, July 19, 2017 5:05 PM
To: CoCoList for Color Computer Enthusiasts
Cc: Salvador Garcia
Subject: [Coco] Malware in wimgtool?

Hi all. I am curious about wimgtool and its ability to explore DSK files. I went to Color Computer Archive and searched and located this page:

http://www.colorcomputerarchive.com/search?q=wimgtool+&ww=0&cat=&cs=0



Downloaded the ZIP, extracted and launched the EXE. My antivirus had a field day!

It reported the following malware:

http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2011-040713-4916-99&vid=4294919975

Is this a false positive? Has anyone had any experience with this app and specific ZIP? Thanks! Salvador


--
Coco mailing list
Coco at maltedmedia.com
https://pairlist5.pair.net/mailman/listinfo/coco