![]() version 9.7) when the release notes of the current version 10.0 state that the installer is now ad-free. Guy Macon ( talk) 16:46, 6 February 2018 (UTC) Reply Maybe you only misinterpreted your observations? The "partial weirdness" is explained here: You didn't happen to use IE to download FreeFileSync? Additionally, why are you checking an old version of FreeFileSync (i.e. ![]() It really does look like the FreeFileSync website sends a smaller, malware-free file to online virus scanners and a larger, malware-infected file to anyone who downloads the installer. Notice that both Wikipedia files have the same file size and the same SHA-256 hash but the two FreeFileSync files don't, and the one that is flagged as having malware is much larger. I did the same test with the file at (I know that file has no malware because I created it and have personally inspected every byte of it) and didn't see the ".partial" weirdness. plus at least three other virustotal users have uploaded the exact same file and commented on it. This made me suspect that I had tested a partially-downloaded file, so I double checked by downloading it again and checking that the filename I downloaded did complete and was indeed "FreeFileSync_9.7_Windows_Setup.exe". ![]() Guy Macon ( talk) 04:35, 2 February 2018 (UTC) Reply More weirdness: virustotal gives the filename "FreeFileSync_9.7_Windows_" for the file I downloaded. It looks like they send a malware-free copy to virustotal (and presumably other antivirus websites) but send malware to users who download the installer. ![]() When I download the installer and run the file through virustotal, I get several alerts: īut when I instruct virustotal to go to the url and download the file it comes up clean. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |