WinToolkit from 1.7.0.1 to 1.7.0.8 to antivirus quarantine

[mcluskyism]

Hi everyone, I'm new to the forum, I hope I wrote in the appropriate one.
I wanted to point out that my company antivirus (Check Point Endpoint Anti-Malware Blade) identifies WinToolkit.exe as infected with UDS:Trojan.MSIL.Agent.gen and relegates it to quarantine.
This happens with the WinToolkit_1.7.0.7 version which is therefore unusable, while with the WTK_v1_1.7.0.0 version the same executable passes the control, and it works.
I would like to test the versions prior to 1.7.0.7 but the download link only points to the latest.
Where can I find intermediate versions? Or should I wait for the next one?
Feel free to offer me further suggestions, thanks and greetings

Hallo allerseits, ich bin neu im Forum, ich hoffe, ich habe in der entsprechenden geschrieben.
Ich wollte darauf hinweisen, dass mein Unternehmensantivirus (Check Point Endpoint Anti-Malware Blade) WinToolkit.exe als mit UDS infiziert identifiziert: Trojan.MSIL.Agent.gen und in die Quarantäne verschiebt.
Dies geschieht mit der WinToolkit_1.7.0.7-Version, die daher unbrauchbar ist, während mit der WTK_v1_1.7.0.0-Version dieselbe ausführbare Datei das Steuerelement übergibt und funktioniert.
Ich möchte die Versionen vor 1.7.0.7 testen, aber der Download-Link verweist nur auf die neueste Version.
Wo finde ich Zwischenversionen? Oder soll ich auf den nächsten warten?
Zögern Sie nicht, mir weitere Vorschläge, Dank und Grüße anzubieten

[Thiersee]

Buongiorno e benvenuto!

....
while with the WTK_v1_1.7.0.0 version the same executable passes the control, and it works.
....

Version 1.7.0.0 is the last version from the 1st programmer of WTK.
With intermediate versions it may happen too that the AV identifies the executable as infected: it's a false positive!
Anyway you can get such intermediate versions only from the user unantastbar (programmer/new developper), but only in two weeks: he is on holiday!
The same happens with MSE; the new version 1.7.0.8 isn't identified a infected (until now!).

[Nemo]

Hi mcluskyism,

Welcome to the forum!

When Sven/Unantastbar (the owner of this forum) launched WTK v1.7.0.8 before his vacation he apparently had no time to update the head of "Win Toolkit - Aktuelle Version".
Although named as "WTK v1.7.0.7" the link leads to the DL of the actual version v1.7.0.8.

As @Thiersee already mentioned:

the AV identifies the executable as infected: It's a false positive!

Regards, Nemo

[mcluskyism]

Hy guys
thanks for the quick answers, unfortunately I have just tested the latest version too, the false positive is still present, for now I try to stay on the original version v1_1.7.0.0 (more information for Nemo https://www.wincert.net/forum/topic/145 ... uarantine/). Thanks again

[Nemo]

Hi,
I hope the old WTK Thiersee uploaded for you will do.

Regards,
Nemo

[mcluskyism]

Hi Nemo, just downloaded the bulk archive of intermediate releases, I will test ASAP and sorry for the delay.
For now, just for sake of clarity:
original v1_1.7.0.0 passes antivirus check
latest 1.7.0.8 and previus 1.7.0.7 don't
in between, who knows?

[mcluskyism]

Hi to all, unfortunately I can confirm that all releases of WinToolkit from 1.7.0.1 to 1.7.0.8 are presumed infected, according to my company antivirus.
I am still convinced that this is a false positive, but for now I am screwed.
Thanks anyway for all the support, and greetings to the whole forum

[Nemo]

Hi,

Ask your IT administration to whitelist WTK!

Rgards, Nemo

[mcluskyism]

Hi Nemo, it's not difficult, it's really impossible, my colleagues are very very much cruel BTW I am joking
Sorry for the delay, have a nice week end