RDWorks Installer has Trojan:Win32/Rundas.B

Went to download RDWorksv8 from the Thunderlaser site. Windows Defender pops up with it being infected with Trojan:Win32/Rundas.B. Anyone have a clean copy?

I’ve run into this before with other software. For some reason installers for industrial software tends to get flagged as malware quite a bit. This could be a false positive. It looks like this has happened before with this specific Trojan signature with other , as seen here:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning/a-file-is-being-detected-as-trojanwin32rundasb/33490af3-8cbe-40a5-9dd4-6ea6e4b24cba

Microsoft’s SOP is to have it submitted by the manufacturer as a false positive here: https://www.microsoft.com/en-us/wdsi/filesubmission/

Could try emailing thunderlaser ([email protected]) with this info and see what they say. They may not be aware it’s infected (assuming it really is).

Edit: Also, first post WOOOO!!! I’ll see you guys Thursday evening! I want to come check out DMS, seriously considering becoming a member.

4 Likes

I just ran into this as well. Did you happen to get any resolution to it?

No, have had other things come up and have not looked at it again.

I ended up wiping it. Seems pretty suspicious.
https://www.hybrid-analysis.com/sample/f453f1b5ac725ea75475e1cfc34c90d54e6d305e7db181a44c9512ca8b80074d?environmentId=100

This version should be clean.

2 Likes

New DMS member. How do I access the committee network file to download. I keep getting a warning when I download from the Thunder website. Thanks

https://dallasmakerspace.org/wiki/Storing_computer_files

1 Like