I wanted to give Krita a spin, but on Virustotal.com, the K7GW scanner reports Trojan ( 34f866661 ), which a quick Google search links to "Chinese Espionage Group TEMP.Periscope", so now I'm put off.

Is this a known, false positive, or is the server compromised?

File: krita-x64-4.1.5-setup.exe as downloaded 20181019 at around 12:00 CET
SHA256: 92bd8a484d59dee6211bf3fe8c01a079025f6a79b6db5578aa0107a4af0fb529
Last analyzed octover 19th at 08:25:07 UTC

Links:
Virustotal analysis
ThreatMiner

It's a false report. It always is... If you have Windows 10 you should not use any third-party virus scanner, they are all risks: see https://robert.ocallahan.org/2017/01/di ... xcept.html The entire Windows security industry is rotten to the core.