Clean Up Tools - check on VirusTotal.com

Corel Paint Shop Pro

Moderator: Kathy_9

Post Reply
Radim
Posts: 712
Joined: Mon Nov 01, 2010 5:54 pm
operating_system: Windows 10
System_Drive: C
32bit or 64bit: 64 Bit
ram: 4GB
Monitor/Display Make & Model: 27 inch

Clean Up Tools - check on VirusTotal.com

Post by Radim »

When I do some backups,
I see that the last 2 cleaners 2022 and 2023 are not digitally signed, I checked both.

Interesting -
PSP2022_Cleanup.exe - https://www.virustotal.com/gui/file/9de ... 47aab54c13
PSP2023_Cleanup.exe - https://www.virustotal.com/gui/file/4fd ... 1353b8ecbe

I know it is false positive, but.. 8)
User avatar
User10232023
Posts: 29
Joined: Mon Oct 23, 2023 9:50 pm
operating_system: Windows 10
System_Drive: C
32bit or 64bit: 64 Bit
processor: Intel Core i7-12700
ram: 16 GB
Video Card: Intel UHD Graphics 770
sound_card: Realtek ALC3246
Hard_Drive_Capacity: SDD 512GB HDD 4TB
Monitor/Display Make & Model: 27" Acer KA2272U
Corel programs: PaintShop Pro 2021 (64-bit), -JASC PSP7

Re: Clean Up Tools - check on VirusTotal.com

Post by User10232023 »

Very interesting, bet Kathy_9 will be interested.
Since those same files would be on the new PSP forums website?
https://psp-vs-forums.freeforums.net/th ... x4-psp2023
Kathy_9
Site Admin
Posts: 2896
Joined: Tue Nov 30, 2010 12:44 am
operating_system: Windows 10
System_Drive: C
32bit or 64bit: 64 Bit
processor: 8th Generation Intel Core i7 8700 3 20 GHz
ram: 16GB
Video Card: NVIDIA GeForce RTX 2060 [6 GB GDDR6 dedicated]
sound_card: NVIDIA High Definition Audio
Hard_Drive_Capacity: 2TB
Monitor/Display Make & Model: HP EliteDisplay E243m 23.8-inch
Corel programs: PSPX2 ~2023; Painter 2018~23
Location: USA
Contact:

Re: Clean Up Tools - check on VirusTotal.com

Post by Kathy_9 »

Yes, thanks, definitely a false positive.
PSPX9 | PSP2020 | PSP2021| PSP2022 | PSP2023 & PhotoMirage installed; PSPX | PSPX2 thru PSP2019 owned but not installed
http://www.flickr.com/photos/37153430@N03/
LeviFiction
Advisor
Posts: 6831
Joined: Thu Oct 02, 2008 1:07 pm
operating_system: Windows 10
System_Drive: C
32bit or 64bit: 64 Bit
motherboard: Alienware M17xR4
processor: Intel Core i7-3630QM CPU - 2_40GH
ram: 6 GB
Video Card: NVIDIA GeForce GTX 660M
sound_card: Sound Blaster Recon3Di
Hard_Drive_Capacity: 500GB
Corel programs: PSP: 8-2023
Location: USA

Re: Clean Up Tools - check on VirusTotal.com

Post by LeviFiction »

The Cleanup tools are based on the AUTOIT script engine - https://www.autoitscript.com/site/

The "Compiled" version is just the script embedded with the EXE which autoit does not digitally sign. It's possible to de-compile and see the script that's being used to clean up the data. Their forums have entire topics on why scripts made with it are flagged as potentially malicious. They also have entire posts on how to add a digital signature to your AUTOIT compiled sripts which Corel didn't feel the need to do.

But yeah, if anyone is interested in what these cleanup scripts are doing I recommend this - https://www.autoitscript.com/wiki/Decompiling_FAQ
https://levifiction.wordpress.com/
Post Reply