All Activity

I agree with you, and everyone knows: I love @win32, but then again, win32 has an account here, all it would take just a minute to post a relaxing comment! Don't you think? I mean, we (at least I) deserve this much. I was always loyal to win32.

This (to me at least) is "much ado about nothing". I'm seeing these as FALSE POSITIVES and a programmer that is FED UP with "explaining to the masses" that it is a FALSE POSITIVE. That's the PROBLEM with anti-virus "crap". You have to PAY MONEY to get your code APPROVED. Supermium/Thorium is FREE. How can a coder/programmer PAY to get code "approved" when the project generates no revenue? So the coder/programmer just throws his/her arms in the air and GIVES UP.

It was, the https://win32subsystem.live/supermium/ link is good. @UCyborg meant there's still a place to download Supermium, (from https://win32subsystem.live/supermium/).

This is getting interesting with each second! Now we can be sure it wasn't just a gihub takedown. @NotHereToPlayGames Basically, win32 erases himself from the internet. Guys, probably make a topic and ask win32 to make an annoucemnet?

I reported in Thorium topic that file, quite some time ago - chrome_pwa_launcher.exe Then @D.Draker suggested us to delete it, and we moved on.

Hi, It appears the dragging animations don't work with 3.7.10 and 24H2. When I try to drag a program in the taskbar to rearrange it, there is no visual feedback showing the taskbar button moving. It does still end up moving to the new location when the mouse button is released. This only occurs with the default style; it does not occur with the Windows 8 or Windows 7 styles which work fine.

with lots of fixes, it works. changes: https://github.com/roytam1/firefox38-vc2010/compare/dd0315735742429dbaae309babccfc08583f9310...HEAD

Don't know, The two files that still light up for me are notification_helper.exe & chrome_pwa_launcher.exe,

I checked each file separately, but apart from setup and uninstall it found only two files. It turns out that inside the archive finds a lot, but without the archive - no, how is this possible?

That scanner opens .zipped files, so just now removed setup.exe & uninstall.exe, zipped & scanned again. Fewer hits, but still some: EDIT: JUST ONE. I used "add to archive," so uninstall.exe got scanned. Sorry. Real result: Again, pretty sure it's false.

I installed Auto Refresh Page addon in Basilisk 52, it has a feature to search for keywords on automatic page refresh, then display notification and play sound effect. When I do the test, the notification does show up but no sound can be heard. I extracted the XPI and found the mp3 file "auto_refresh_page-3.2.xpi\assets\sounds\notification.mp3", so for some reasons Basilisk does not play this file. Could anyone please help me out? Thank you!

I'm checking individual files, not the whole folder, and it seems to be clean there, I checked almost all files, but only chrome_pwa_launcher.exe has one trigger. Strangely, the number of antiviruses finding something is much lower in the 64 bit version.

Not the only one: https://win32subsystem.live/supermium/

Late Win10 and all of 11 has been horrible. Even early to mid 10 is only decent, and that is when you use server 2016/2019

Also think it's all false positives, but i've zipped *just the supermium folder* (without setup.exe) & got a bunch of hits. Edit: Might just be uninstall.exe (that lights up), will try without it.

Checked individual files, yes progwrp.dll is clean, all triggers come from setup.exe. But again, none of the famous antivirus does not find anything there, so I'm inclined to false positives. Perhaps all these antiviruses use the same detection method.

If you ask me, MSFN team might wanna put a warning on both, at least until it clears out. If it ever clears out. @Dave-H

You mean you helped with the siper fast Supermium's page deletion? One doesn't need to be a clairvoyant to predict millions of freak outs this evening.

Additional investigation is required. I'm generally a bit skeptic on "virus" reports in general. I've seen more FALSE POSITIVES in my lifetime than I've ever seen for "real" positives. All of this is very suspicious. Thankfully (in my opinion), the "free pass" has been revoked. I'll take 25% credit for that, lol.

Also scanned just the supermium folder (without the installer) (scroll down, bad link). Glad to help.

No, @66cats had scanned the whole installer, not that precise file. Look below. https://msfn.org/board/topic/186133-thorium/?do=findComment&comment=1267118

I think it's progwrp.dll, it overrides system calls, so it can be detected as suspicious. The same happens with VxKex for Win 7, it also has call interception and some antiviruses detect it as a malware. Kaspersky antivirus also detected progwrp.dll as a trojan at first, but after updating the antivirus databases it stopped detecting it, apparently they figured out that it was a false positive. And on Virustotal, only some unknown antiviruses find trojans, only 2-3 I've heard of at all.

I checked this page not long before it got silently deleted without any announcement. I find it strange, if you ask me. Remember they made a dedicated thread about their fake page? I'm sure they would've written in advance in such serious case. Fishy, very fishy. And the timing of @66catsreport indeed matches the deletion!

Fingers crossed that Thorium's GitHub at least stays up until I can download the latest. (edit: not even going to attempt to download here at work, lol, lest my PC be flagged on three continents' IT Depts) Trojan or not, I'd prefer to have them archived on my end. I can inoculate on my end ("maybe").

I'm not sure how those "take-downs" work. Did GitHub take it down? Or did "win32ss" take it down? Thorium's GitHub is still up. At the moment anyway.