WHDownloader - Support and chat

Discussion in 'WHDownloader' started by Alphawaves, Apr 29, 2013.

  1. nimdas

    nimdas MDL Member

    Oct 14, 2020
    186
    6
    10
    couldnt find 0.0.2.3
    where to find download link
     
  2. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,246
    94,631
    450
    At the download thread:
    WHDownloader - Download
     
  3. nimdas

    nimdas MDL Member

    Oct 14, 2020
    186
    6
    10
    Trojan.Malware.300983.susgen
    Trojan.Malware.300983.susgen is a harmful, stealthy malware program that can disguise itself as legitimate OS processes and execute its harmful tasks without getting spotted by the antivirus. Infections like Trojan.Malware.300983.susgen are categorized as Trojan horses and they are commonly used for espionage and distribution of ransomware.
     
  4. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,246
    94,631
    450
    False positive, when most popular and well known AV's aren't triggered but two unknown (at least to me) AV's are triggered, and i myself (and manymanymany more users) never got any AV report, it's safe, as long as the checksums are verified.
     
  5. nimdas

    nimdas MDL Member

    Oct 14, 2020
    186
    6
    10
    i can believe you but unfortunately due to my zero trust security model i cant trust it as there is many dangerous encrypted trojans with 0/69 detection rate

    i can test it but i will never work with such windows as private use
     
  6. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,246
    94,631
    450
    If it was a real infection it would a: not online anymore and b: it's created by @Alphawaves, a very trusted longtime MDL staff member.

    These days even simple .cmd files get falsely flagged as virus/trojans.
     
  7. nimdas

    nimdas MDL Member

    Oct 14, 2020
    186
    6
    10
    it could be manipulated online or while downloading by third party
    MITM
     
  8. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,246
    94,631
    450
    How? Nobody can manipulate a file this big and still have the original checksums.
     
  9. nimdas

    nimdas MDL Member

    Oct 14, 2020
    186
    6
    10
    its not enough since hashes can be modified
    if hashes are photographically signed then it provide more security to be sure that files and hashes weren't tampered with
     
  10. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,246
    94,631
    450
    For a very small 6kb pdf file (iirc), not for big files.

    And from 2 separate unrelated mirrors.
     
  11. fch1993

    fch1993 MDL Senior Member

    Mar 14, 2020
    367
    267
    10
    @abbodi1406

    Question about WHDLists for Windows 7/8.1

    For which reason KB4601058 is not replaced by KB5001845?

    I see Windows 7 replaced the .NET 4.8 Security and Quality Rollup update but Why Winodws 8.1 don't.
     
  12. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    16,194
    84,742
    340
    @fch1993

    non security .NET rollup do not replace security .NET rollup (WU metadata)
     
  13. adric

    adric MDL Expert

    Jul 30, 2009
    1,250
    1,324
    60
    Shouldn't that also apply to Win7?
    According to the KB text 5001843 is non-security and 4600944 is security + non security
     
  14. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    16,194
    84,742
    340
    Yes

    but .NET 4 on Win7 is MSI product, latest patch with newer files version will silence WU, regardless the metadata
     
  15. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    16,194
    84,742
    340
    @fch1993

    Yes, it's out of support eventually

    no one knows why they silently extended it for extra 6 months