Page 1 of 1
Flash Download Tool Virus Threat
Posted: Sat Jan 25, 2025 6:10 am
by mikemoy
I tried to download the "Flash Download Tool"
https://docs.espressif.com/projects/esp ... _tool.html
Windows immediately popped up with a virus threat!
- Untitled.jpg (53.41 KiB) Viewed 1963 times
Re: Flash Download Tool Virus Threat
Posted: Sat Jan 25, 2025 10:29 am
by halogen_chamber266
I have encountered the same problem. Yesterday I downloaded the file from "
https://dl.espressif.com/public/flash_download_tool.zip" and this morning Windows warns that it detects a Trojan in the file flash_download_tool_3.9.8_3.exe
Re: Flash Download Tool Virus Threat
Posted: Sat Jan 25, 2025 9:08 pm
by gomby007
Same here. Because of the threat level, I'm not comfortable assuming it's a false positive. Unfortunately Espressif doesn't give us the checksum so we can't verify independently if it's safe. Hopefully we'll get an answer soon.
- VirusThreat.jpg (128.27 KiB) Viewed 1697 times
Re: Flash Download Tool Virus Threat
Posted: Mon Jan 27, 2025 3:46 am
by ESP_Sprite
I'd tend to think it's a false positive... see
here for a VirusTotal check on it. Three out of the 72 scanners see it as malicious, I'd think it'd be a lot more if it were real. I'll ask the team responsible for it anyway, if it indeed is a false positive then we can maybe generate a slightly different build that does not trigger the warning.
Re: Flash Download Tool Virus Threat
Posted: Tue Jan 28, 2025 11:08 pm
by gomby007
I completely agree, it's most likely a false positive. But the risk of being wrong is too high, considering the threat level and what this malware does. So until Espressif confirms that it's a false positive, and upload a version that doesn't trigger it, I'm not ready to take the risk.
Re: Flash Download Tool Virus Threat
Posted: Tue Jan 28, 2025 11:09 pm
by gomby007
Oh and also, thanks for the link, I didn't know about that tool.
ESP_Sprite wrote: ↑Mon Jan 27, 2025 3:46 am
I'd tend to think it's a false positive... see
here for a VirusTotal check on it. Three out of the 72 scanners see it as malicious, I'd think it'd be a lot more if it were real. I'll ask the team responsible for it anyway, if it indeed is a false positive then we can maybe generate a slightly different build that does not trigger the warning.
Re: Flash Download Tool Virus Threat
Posted: Wed Jan 29, 2025 5:30 am
by ESP_Sprite
Understandable. Unfortunately, the colleague responsible is on holiday because of CNY, so it may take a few days to get this fixed.