Flash Download Tool Virus Threat

[mikemoy]

I tried to download the "Flash Download Tool"
https://docs.espressif.com/projects/esp ... _tool.html

Windows immediately popped up with a virus threat!

Untitled.jpg (53.41 KiB) Viewed 1965 times

[halogen_chamber266]

I have encountered the same problem. Yesterday I downloaded the file from "https://dl.espressif.com/public/flash_download_tool.zip" and this morning Windows warns that it detects a Trojan in the file flash_download_tool_3.9.8_3.exe

[gomby007]

Same here. Because of the threat level, I'm not comfortable assuming it's a false positive. Unfortunately Espressif doesn't give us the checksum so we can't verify independently if it's safe. Hopefully we'll get an answer soon.

VirusThreat.jpg (128.27 KiB) Viewed 1699 times

[ESP_Sprite]

I'd tend to think it's a false positive... see here for a VirusTotal check on it. Three out of the 72 scanners see it as malicious, I'd think it'd be a lot more if it were real. I'll ask the team responsible for it anyway, if it indeed is a false positive then we can maybe generate a slightly different build that does not trigger the warning.

[gomby007]

I completely agree, it's most likely a false positive. But the risk of being wrong is too high, considering the threat level and what this malware does. So until Espressif confirms that it's a false positive, and upload a version that doesn't trigger it, I'm not ready to take the risk.

[gomby007]

Oh and also, thanks for the link, I didn't know about that tool.

I'd tend to think it's a false positive... see here for a VirusTotal check on it. Three out of the 72 scanners see it as malicious, I'd think it'd be a lot more if it were real. I'll ask the team responsible for it anyway, if it indeed is a false positive then we can maybe generate a slightly different build that does not trigger the warning.

[ESP_Sprite]

Understandable. Unfortunately, the colleague responsible is on holiday because of CNY, so it may take a few days to get this fixed.