TROJAN CONTAINED IN VERSION 3.5.4

[waddie96]

See attached:

https://www.virustotal.com/gui/file/41f3b165c218cd984f8463a7f672bf711dd7233b9696691a7a071d1344ac33dd/detection

[waddie96]

See #354

[A11yEvangel]

[AI Summary]
Jiangmin is Chinese in origin. It was developed by Beijing Jiangmin New Science & Technology Co., Ltd., founded in 1996 by Wang Jiangmin. The company was once a pioneer in China’s antivirus industry, with its KV series software gaining early traction domestically and even being exported to Japan and the U.S. in the early 2000s.

Reliability: Jiangmin’s reliability is a mixed bag:

• False Positives: It has a reputation for flagging files as malicious that other major antivirus engines (like Microsoft, BitDefender, Avast, etc.) do not. For example, in VirusTotal scans, Jiangmin has occasionally been the only engine to detect a supposed Trojan, which strongly suggests false positives.

• Declining Reputation: Once a respected name, Jiangmin has been overshadowed by other Chinese antivirus brands like Qihoo, Tencent, and Baidu. Security forums describe it as a company in decline, and many users advise against relying on it as a primary antivirus solution.

• Detection Engine: It may use aggressive heuristics, which can lead to over-detection. This might be useful in niche cases but can be problematic for everyday use.

[ferllings]

Thanks @A11yEvangel for looking into this.
I do believe it's a false positive: the windows picker hasn't changed recently,
and I don't see how it would have been corrupted.
But just to be safe, we are doing some checking ourself.