Hi guys,

Today I just installed Korg Collection 6 v6.2.0-R2R from sister site, but I downloaded it from rutrck3er because of the size. When I went to launch the keygen from R2R it loaded but nothing popped up as normal, double clicked again and nothing popped up. I have ESET antivirus and it didn't got flagged. Then I went to Virustotal and analyzed the file and gave me this result. I would like to know if I just infected my computer because the R2R keygen wasn't legit and what I should do next. Or if all of these were false positives. It seems scary.

Thank you very much.

 

That release was posted by Funtime. It is a real release from R2R. Those detections are false positives. Many of them even say they are a keygen, hack tool, or Potentially Unwanted Program.

 

Okay thank you! then why with some releases of R2R the exe file opens normally and just this time or I remember another time it also happened, the exe loads and then nothing opens? I didn't download it from the sister site I did it through trrnt via rutrckr website. I know it's a trusted site and I never really had problems there, same as the sister site.

I am aware that there are false positives but this huge amount with the weird behaviour of the exe file that never happened to me made me wonder.

Does it happen too with the downloaded keygen from the official release from sister site, anyone can confirm? Is there a way to double check the signature of the R2R file and know that it hasn't been modified (the keygen)?

Thank you all fam!

 

If it's R2R or others on sis site, it's safe. I never got a virus in over the 10yrs I've been here. I don't use an antivirus on site. Save yourself the stress, and turn your antivirus off with gifts obtained here.

 

Great diligence. This could be a learning moment if in fact the two sources have differerent malware. Some people have suggested that in the past but no data.

 

sounds worry but this happens because of you ;) or better your sysntem, similar as those lame-faillert antivir-apps you system (eg. cheap embedded windows anti wtf) decide like those and than decide to let you stand in the rain (double click and NOTHING happens, no message or else) just wnt notice that this is many times the reason. i suggest : if you're not sure apply whatever in a virtual enviroment \ eg. clean win\workstation and before turn anything off that act as you quoted. sorry for my bad english. but also want say: for real i think also all is well make no head (except that you're not the boss and starting apps dont worx, the boss is win! hrhr)

 

Wait a minute, I thought the first post said it was from sister site. Now that you asked for comparison to the sister site, I notice that you mention you got it from rutracker. Scanning the keygen that was shared today would be a good idea.

 

the release on the sister site does not have a keygen, it is part of the korg software pass separate release. that release does show the same
44/71 security vendors flagged this file as malicious
when scanned at virustotal though so you're probably good

 

Okay guys, thanks for the prompt replies and support, I really appreciate it.

This is the keygen I'm pointing at, and it is included in the R2R release in the sister site. Activation : KORG.Software.Pass.v1.3.9.WIN.MAC.Incl.Keygen-R2R

The only concern is that for YEARS, I've been downloading big release files (+1GB) from rutracker, since a lot of people reshare the sister site release there to make it easier to download via torrent. But I got worried because maybe someone could modify the keygen file and add unwanted malware.

Stopped, you mean you've tested the sister site's release and it is flagged with the same amount and it has the same hash?
You also said sister site doesn't have a keygen (I don't know because I haven't downloaded it), you're sure we were scanning the same thing? KORG_Keygen

I also want to open the debate on whether we can safely download big sister site releases via rutracker or not. I've never had an issue but I always trust our community much more since it's where the releases are originally posted. What do you think guys?

 

I always run keygens in a VM to isolate them, just in case. Doesn't matter if they come from sister site or direct from my scene ftps / dc hubs. You can do that and monitor the actual installation with Revo Uninstaller or something if you want to see a log of every file it drops and every registry key it reads/writes, just for extra peace of mind.

 

I have Revo Uninstaller but I don't think it allows you to monitor an installing .exe file. For uninstallations is handy but how can you monitor when you open it if it drops anything suspicious?

 

Monitored Install is not in the free version. The webpage for Pro shows this:

Real-Time installation monitor
The Real-Time Installation Monitor tracks changes made to your system during the installation of a program, and records all that data to a so-called "trace log". The Trace log can be used later when uninstalling the program, allowing for a precise and more thorough program removal, deleting obscure leftovers that a traditional leftover scan may have otherwise missed.

 

this is very usual.. happens all the time the keygens get into quarantine.. its not a virus.. its a false positive.. but be careful

 

Facts!!!
Same here going on 15+ not a single issue, only local user "errors" lol

 

To me it's not a matter of trust, its a matter of risk. For me, the reward far outweighs the risks taken, but I try to minimise risk wherever I can.
If you're on Windows and suspicious like me then use Sandboxie Plus for running KGs - it's open source, you run the KG/app or whatever in a new/clean sandbox, generate the key. If you want to find out what it's doing you can then go in and browse the sandbox like a regular file explorer and see where it's put files. If you've generated a license file you can copy that out of the sandbox - still some risk there, sure, but IMO a license file is much less risky than an executable. You can then delete or wipe the sandbox.
That said, always backup your important stuff - if it's not backed up (i.e. at least one redundant copy on another physical drive or device) it's not important.