I use Gridinsoft and last version 5.0.3 Paint.net is removed automatically, every day
---- C:\Program Files\paint.net\paintdotnet.exe ---- General Threat
Trojan.Downloader.dd!c
ProdVer: 5.3.8488.42200
FileVer: 5.3.8488.42200
Name: paint.net
Signature verification: True
Certificates: DOTPDN LLC
NAC: 0E37B4001D9821EEB92BE29CFFA6AB2A:9
MD5: A53D77764C69AA22E9CD560B425A1C87:106984
RIC: 68E1DDE30480DC2E6B5E1423E536F140:77476
RFH: 1536:ZXGhXIggyNEcVAMHTwAtNwUKMM%2BenpzjZbp2bx5:kITytApFUKjbobH
SUBS: Win32 GUI
PE: x64
EP: 4883EC28E85B0200004883C428E97AFEFFFFCCCC4883EC28E8DB07000085C0742165488B042530000000488B4808EB05483BC8741433C0F0480FB10DF437000075
EPSEC: 0
EPRVA: 00001D84
IBASE: 0000000140000000
SEC:
.text:60000020:9711E0EA35127F6C177DC7B8C1990FC3:6656
.rdata:40000040:6680BDC10AAABD864D9B05F288F505A5:5632
.data:C0000040:AE310FABA361F10884B7C80F6C698D3E:512
.pdata:40000040:662FF763202231298F5B2FA240414285:512
.rsrc:40000040:D6C32704B22F4C0BC9EE946B68EC017F:81408
.reloc:42000040:B943973E155EB8C30048ED8FC2415F01:512
