There's virus in kra files?

[Michelist]

I would use the following programs for a second opinion if I were to use Defender, as they are good free portable applications: Emsisoft EmergencyKit, RogueKiller portable, Housecall. I can also offer to scan the files with it, and with Avast as well, one of the best scanners on the market, if not the best.

Michelist

[AhabGreybeard]

@Grum999

and frame 8 from Layer8 is not corrupted,

It was a different krita document to the one originally described because the document existed on an external device that had not been scanned as well as a PC stored copy that had been scanned and quarantined.
That was why it was so easy for me to make a comparison between the two.

I uploaded the .kra file that had not been scanned to Virus Total and it was detected as a .zip file and given green ticks from everybody except those few services that were unable to process that filetype.

It does look like a false positive but my Windows 10 Defender did not show any problems.

[Grum999]

@AhabGreybeard

It was a different krita document to the one originally described because the document existed on an external device that had not been scanned as well as a PC stored copy that had been scanned and quarantined.

So it could be interesting to see @Cyborgnekosica if the file provided to @AhabGreybeard is considered as infected too on your system, and put in quarantine with the layer removed from archive…

Grum999

[AhabGreybeard]

I would be happy to share it but @Cyborgnekosica send it to me privately because I didn’t want download links to potentially dangerous files to be seen on the forum.

If you ask them for the ‘Background’ files (quarantined and not quarantined) then I’m sure they’d be happy to send you the file sharing download link via a DM.

[Cyborgnekosica]

@Cyborgnekosica are you working on Windows 10, Windows 11?

Windows 10

Also I can send the link of the files too if you want

[Grum999]

Ah yes, I’m curious about these files.

Concerning the version of the file that hasn’t been put in quarantine (because on an other drive), if you made a copy of this file on your computer an execute Defender again to scan this file, the file is put in quarantine with the same message?

Grum999

[Michelist]

I scanned them now with Avast, Trend Micro Housecall, Roguekiller portable and Emsisoft Emergency kit, all of them found nothing in the three files you send me @Cyborgnekosica.

Michelist