It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Hi

I need to know if the ImDisk program have virus.

The downloaded program is:
ImDiskTk-x64.exe

I'm not sure if the program was downloaded from the sourceforge.net site or this link from that site:
http://www.ltr-data.se/opencode.html/#ImDisk

In windows 10 the Windows Defender scanning shows no virus at all, but virustotal web shows two virus:
SecureAge APEX Malicious
CrowdStrike Falcon Win/malicious_confidence_60% (W)

https://www.virustotal.com/gui/file/75edc1e0a789d8b05ca3afb550d5109ce1ceaa51012c772f5e7c220b703ce91f/detection

Another site shows virus:
https://www.hybrid-analysis.com/sample/75edc1e0a789d8b05ca3afb550d5109ce1ceaa51012c772f5e7c220b703ce91f

Is that PC compromised or it's a false positive? It's needed Malwarebytes or something?. Only have Windows Defender on W10.

I also found this:
https://sourceforge.net/p/imdisk-toolkit/discussion/general/thread/13a761e4d4/

Thanks in advance
Post edited May 16, 2020 by gogamess
This question / problem has been solved by sanscriptimage
low rated
This file is INFECTED get rid of it!
avatar
fr33kSh0w2012: This file is INFECTED get rid of it!
Are you 100% sure?

Windows Defender shows no alert and Virustotal shows 2 virus and 72 clean virus engines.

https://www.virustotal.com/gui/file/75edc1e0a789d8b05ca3afb550d5109ce1ceaa51012c772f5e7c220b703ce91f/detection
low rated
Why do you even need a program like this?
It's a program for creating a virtual disk drive using the system memory.

Any help?
avatar
gogamess: -snip-
If you might listen to a more sane voice, it looks like you were trying to find an image mounting program. There's plenty of them, but I've never heard of IMdisk. Given that you downloaded it from Sourceforge, I'd find it skeptical at best that they'd allow any malicious software to stay at all.

Why not give WinCDEmu a try? I've used it before, and can attest to it working as it should.
avatar
gogamess: -snip-
avatar
Darvond: If you might listen to a more sane voice, it looks like you were trying to find an image mounting program. There's plenty of them, but I've never heard of IMdisk. Given that you downloaded it from Sourceforge, I'd find it skeptical at best that they'd allow any malicious software to stay at all.

Why not give WinCDEmu a try? I've used it before, and can attest to it working as it should.
Thanks for the info, but the program is for creating a RAM disk, not for a CD/DVD drive. Also, ImDisk support image file mounting.

I've found a post here on GOG talking about ImDisk:

https://www.gog.com/forum/general/ramdriving_games_tutorial
Post edited May 16, 2020 by gogamess
avatar
Darvond: If you might listen to a more sane voice, it looks like you were trying to find an image mounting program. There's plenty of them, but I've never heard of IMdisk. Given that you downloaded it from Sourceforge, I'd find it skeptical at best that they'd allow any malicious software to stay at all.

Why not give WinCDEmu a try? I've used it before, and can attest to it working as it should.
avatar
gogamess: Thanks for the info, but the program is for creating a RAM disk, not for a CD/DVD drive. Also, ImDisk support image file mounting.
I see. I'm over here in the world of Linux, where such programs are at most, unnecessary.
avatar
Darvond: I see. I'm over here in the world of Linux, where such programs are at most, unnecessary.
There are use cases were is quite benefical to use a super fast temporary drive, weather in Windows or Linux... Back in the day, Firefox (and probably other browsers too) could be speed up by using a RAM drive to cache the files. Nowadays computers are quite good managing the RAM and most programs alocate lots of RAM anyways.
Hard drives were slow so RAM drives were a huge improvement but SSD's have limited write cycles. Doing big drive dependent work, like compressing or compiling might be good on not so important work.
I do remember someone, somewhere, who created a RAM drive, installed a OS and was able too boot from it. Can't remember who, when or where though...
avatar
gogamess: Thanks for the info, but the program is for creating a RAM disk, not for a CD/DVD drive. Also, ImDisk support image file mounting.
Here are some alternatives if you need
Post edited May 16, 2020 by Dark_art_
It's almost certainly a false positive. If you're still worried, run it sandboxed or on a test PC and see if it does anything you don't like.

FWIW, I have used a previous version of ImDisk in the past and it didn't do anything malicious.
I've also used it for some time now, and that's a false-positive.

Ran the most recent x64 bit file through Clamwin, Stinger, and finally VirusTotal, and only one (1/60) engine at VT detected something (ANTIY-AVL).

I would suggest scanning your own computer, and download only from original sources (unless the site has been proven to be malicious)
Post edited May 16, 2020 by sanscript
avatar
gogamess: I need to know if the ImDisk program have virus.
IMDisk is a well known RAMDisk program that's been around years and is perfectly fine (clean). It's just another false positive by overly enthusiastic virus scanners.
It's probably ok but virus or malware can go undetected on virustotal with only a handful of the services picking up on it.
avatar
Serren: It's almost certainly a false positive. If you're still worried, run it sandboxed or on a test PC and see if it does anything you don't like.

FWIW, I have used a previous version of ImDisk in the past and it didn't do anything malicious.
The program runs fine, and the PC aswell, it doesn't do anything strange.

Which version do you have? This is the 20191126 version. Anyone have the same version here? ^_^
avatar
sanscript: I've also used it for some time now, and that's a false-positive.

Ran the most recent x64 bit file through Clamwin, Stinger, and finally VirusTotal, and only one (1/60) engine at VT detected something (ANTIY-AVL).

I would suggest scanning your own computer, and download only from original sources (unless the site has been proven to be malicious)
It was downloaded from sourceforge.net site: https://sourceforge.net/projects/imdisk-toolkit/
or maybe the ImDisk driver link: http://www.ltr-data.se/opencode.html/#ImDisk

The computer was scanned with Windows 10 Defender scanner and shows as clean, the installer and the installed folder.

avatar
gogamess: I need to know if the ImDisk program have virus.
avatar
AB2012: IMDisk is a well known RAMDisk program that's been around years and is perfectly fine (clean). It's just another false positive by overly enthusiastic virus scanners.
I hope so! ^_^

And yes, I think it's a very well known program:

https://www.ghacks.net/2017/04/03/the-best-free-ramdisk-programs-for-windows/
https://en.wikipedia.org/wiki/List_of_RAM_drive_software
Post edited May 17, 2020 by gogamess
avatar
Spectre: It's probably ok but virus or malware can go undetected on virustotal with only a handful of the services picking up on it.
I hope so! But Virustotal uses 72 virus scanners! And only 2 of them shows alert, and 70 scanners shows as clean.