Riskware warning when I download plugin

[whale14]

Hi everyone. I'm a new user.
Recently I've tried installing plugins. Unfortunately, every time I go to totalcmd.net, I've got this message: 'Website blocked due to riskware'.

Is Total Commander really riskware? I understand that riskware means 'old software without updates, bug fixes that hackers use vulnerabilities to exploit & attack'. I see many plugins on ghisler.com are very old, like 2011, 2012, 2014. They haven't received updates for a long time.

I've also tried other file managers like XYplorer, xplorer2, DOpus. None of them has been warned as riskware.

Image: https://1drv.ms/u/s!Aouf2RKH181wgvt5FYn8xCPW0wRWGw?e=sRy6hL

[Horst.Epp]

TC doesn't download plugins itself in any way.
Only you using your browser are downloading anything.
The warnings you have come from your Anti-Virus tool or other tools on your system.
There is no problem with Totalcmd.net.
Actual Firefox and Microsoft Edge are don't complain.

[whale14]

Hi! Thanks for your quick reply.

Yes, TC doesn't download plugins. I download them manually.
I use both Windows Defender and Malwarebytes Premium (with browser extension). Only the Malwarebytes browser extension warns 'riskware'. The software doesn't. Weird.

I know that TC isn't virus or malware but may I ask you a question: Is it OK to use old, outdated plugins (b/c they haven't been updated for a long time)? Do they open doors for hacker advanced attack like exploits? I'm worried. That's all I need to know.

[white]

Recently I've tried installing plugins. Unfortunately, every time I go to totalcmd.net, I've got this message: 'Website blocked due to riskware'.

Is Total Commander really riskware? I understand that riskware means 'old software without updates, bug fixes that hackers use vulnerabilities to exploit & attack'. I see many plugins on ghisler.com are very old, like 2011, 2012, 2014. They haven't received updates for a long time.

You asking "Is Total Commander really riskware?" and mentioning ghisler.com is a weird jump form totalcmd.net being blocked due to riskware.

The right question is "Does totalcmd.net really contain riskware?". You should ask the owner of totalcmd.net and Malwarebytes Browser Guard.

[whale14]

Here's what happened: I went to https://www.ghisler.com/plugins.htm. Then I saw totalcmd.net at the end of the page.
ghisler.com was not blocked but totalcmd.net was.

I think it's a false positive. I will ask tcmd & MB. Thanks.

[white]

I know that TC isn't virus or malware but may I ask you a question: Is it OK to use old, outdated plugins (b/c they haven't been updated for a long time)? Do they open doors for hacker advanced attack like exploits? I'm worried. That's all I need to know.

For the plugins on ghisler.com, if there are any known vulnerabilities, I'm sure Christian Ghisler will take action.

Besides that, you should always be worried. Do you trust the third party? Is the plugin open source? Is the plugin being updated? What does the plugin do? Are people stil using it and discussing it? Do you trust your virus scanner?

Personally I rarely use plugins other then the ones created by Christian Ghisler himself.

[whale14]

Personally I rarely use plugins other then the ones created by Christian Ghisler himself.

Tysm for your advice!
Yes, I trust Total Commander because it's on TechRadar editor's choice.

[nsp]

Personally I rarely use plugins other then the ones created by Christian Ghisler himself.

Tysm for your advice!
Yes, I trust Total Commander because it's on TechRadar editor's choice.

In any case, before installing plugins you can use virustotal or your antivirus to check the archive or the extracted content...
I did not saw "dangerous" plugins/utilities since ages .

[petermad]

2whale14
I can recommend installing this little tool: https://www.softpedia.com/get/System/OS-Enhancements/VirusTotal-Uploader.shtml and use it in a button in TC - then you can easily upload a file to virustotal.com directly from TC and have the file checked with more than 60 virus scanners.

[whale14]

Thank you all.

[nsp]

2whale14
I can recommend installing this little tool: https://www.softpedia.com/get/System/OS-Enhancements/VirusTotal-Uploader.shtml and use it in a button in TC - then you can easily upload a file to virustotal.com directly from TC and have the file checked with more than 60 virus scanners.

Duplicate with addition

I just use alternate source for newest version or same old version as SoftPedia is not my cup of tea....
I also used this public key from old application or linux QT version. :

Code: Select all

70f8a7ffa6685471afc85d9202468f7277ae20fa7f78163aa22b4c8822f18a5a

If you have an account just use your own ApiKey...