Reply To: Multiple Search and Replace / May 6 2018

Hello,

it is not a trojan.

This application has been bought by many users and even big companies and has been reviewed from many blogs and magazines.

It is a false flag because our installer (NSIS) only does download a simple php webpage using the NSIS inetc plugin in order totally anonymously log the application installation count (the number of installations only).

We will remove this in the future.

Peter Blaise wrote:

.
Trojan downloader according to VirusTotal

https://www.virustotal.com/en/file/a4567c46dbd05be9d7c39f387c274cb72fb5b2badf36b46eb7bd7e20f1fc4fd6/analysis/1525633053/

— Antiy-AVL GrayWare[Downloader]/Win32.Adload.gen 20180506

— VBA32 suspected of Trojan.Downloader.gen.h 20180504

I suggest that vendors test and tweak their software so as to eliminate malware, and so as to pass malware examination.
.