Main Forum > Tweaking.com Support & Help

The digital signature of tweaking_rati.exe, is invalid?

(1/4) > >>

midimusicman79:
Hi all!

First; thank you for two great programs; Tweaking.com Windows Repair (All in One) and Registry Backup! :smiley:

Especially Windows Repair has saved me several times, when various Windows-functions unknowingly stopped working all of a sudden. :wink:

However, while scanning my computer with HitmanPro.Alert, it says that the digital signature of tweaking_rati.exe, which belongs to Windows Repair (All in One) v.3.8.0.7, is invalid?

Moreover, VirusTotal confirms this: https://www.virustotal.com/en/file/8d1ee9d3f122ddedbf80c213d868faecf8d68352160cb9c3023a59cf03149bdc/analysis/1461079256/

Please correct this?

Thank you very much in advance!

Log file below:

Regards,
midimusicman79

HitmanPro 3.7.14.263
www.hitmanpro.com

   Computer name . . . . : DESKTOP-GL9UU7I
   Windows . . . . . . . : 10.0.0.10586.X64/8
   User name . . . . . . : DESKTOP-GL9UU7I\TMA
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Paid (774 days left)

   Scan date . . . . . . : 2016-04-28 12:28:39
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 1m 27s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 1

   Objects scanned . . . : 1 739 523
   Files scanned . . . . : 36 560
   Remnants scanned  . . : 321 690 files / 1 381 273 keys

Suspicious files ____________________________________________________________

   C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\tweaking_rati.exe
      Size . . . . . . . : 46 048 bytes
      Age  . . . . . . . : 1.9 days (2016-04-26 14:44:27)
      Entropy  . . . . . : 5.0
      SHA-256  . . . . . : 8D1EE9D3F122DDEDBF80C213D868FAECF8D68352160CB9C3023A59CF03149BDC
      Product  . . . . . : Tweaking.com - Run As TrustedInstaller
      Publisher  . . . . : Tweaking.com
      Description  . . . : Tweaking.com - Run As TrustedInstaller
      Version  . . . . . : 2.1.0.0
      Copyright  . . . . : 2014
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Invalid
      Fuzzy  . . . . . . : 22.0
         Program is altered or corrupted since it was code signed by its author. This is typical for malware and pirated software.
         Time indicates that the file appeared recently on this computer.

Boggin:
I've upgraded to 3.8.7 and my Norton Security hasn't snagged anything.

When you start WR and it checks its files, does that find any error ?

I would reinstall WR and then see if HMPro or Virus Total.com still snags it.

Julian:
Gen, generic, false positive. It is that  only one av. File just has to be sent to them no worries there 😀

midimusicman79:
Hi, Boggin & Julian!

Sorry for the delay on my part!

Anyways, thank you both for the prompt and insightful replies! :smiley:

When i start WR and it checks its files, that does not find any error.

I have uninstalled and reinstalled WR, but HMPro and Virus Total.com still snag it.

Maybe this will be fixed in the next version of WR?

Thank you very much for the help! :smiley:

Regards,
midimusicman79

Boggin:
Download Process Explorer then run Windows Repair to see if Virus Total.com snags anything then.

https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx

Click on Options and ensure Verify Signature is checked then hover over VirusTotal.com and check its box.

While it doesn't find a verified signature for WR or the system tray, it doesn't give it a rating for me either.

Navigation

[0] Message Index

[#] Next page