Don't remember as I've deleted the install file, but I do have the latest driver installed (2.0.10).

In most of the cases programmers changes or adds features/code/algorithms that may look like malware, and since malware scanners are based on known patterns, they produce false-positives relatively often. Especially given the nature of such programs. There's nothing nefarious about that, and it's up to the programmer to either change it again or verify it so that these malware scanners don't mark it as unsafe. No, they don't catch everything, and yes, malware scanners, especially the most known/pricey ones, are known to be a bit overzealous (and then the smaller ones copy those patterns). If you'd used forensic and hacker tools you'd know most of them are blacklisted... even those that are considered clean officially are also blocked by search engines, file sharers, and browsers.

Why obsess about an old file when the new one has been confirmed to be clean, even the maintainer himself have explained it. Like I wrote, unless the maintainer is proven by several sources / sec researcher to be malicious, then you just have to trust it. And most importantly, unlike proprietary programs, this is open source, meaning you can take the source and build it yourself. If you still don't trust it - why even use it?

Those two sites distribute very different installers/packages; tr-data.se has only the main virtual driver, while sourceforge has the toolkit. If you have more than one tool in the same folder then you can't have downloaded and installed it from the former (ImDiskTk-x64.zip vs imdiskinst.exe). It's that simple.