Virus Found?

[daJabberwocky]

I'm a newbie...
During the installation process of the ImageMagick-7.0.5-5-Q16-x64-dll.exe (downloaded from the ImageMagik Downloads page), I received the following error message:

[dlemstra]

Have you tried running it through https://www.virustotal.com? We get a lot of false positive reports.

[hrbrmstr]

VT does, indeed, have this coming up clean but others are getting the same issue and it's getting one ping on Metadefender: https://www.metadefender.com/#!/results ... r/analysis

After the recent issue with Handbrake having pwnd downloads (albeit from a mirror site) folks are likely a bit less inclined to just tick the "exclude" box for things w/o verification that it is indeed OK.

[revodavid]

I am having the same problem on the latest Windows 10. Windows Defender reports presence of Trojan:Win32/Clavior.C!cl when attempting to run the .exe (ImageMagick-7.0.5-5-Q16-x64-dll.exe). It may indeed be a false positive, but it makes the Windows binary effectively unusable.

# David Smith

[fmw42]

Are you sure you are running the IM convert.exe and not the Windows convert.exe?

[GoodHumor]

Greetings,

An old newbie here. I just tried to download and install via HTTP and Microsoft Security Essentials kicked this out.

ImageMagick-7.0.5-5-Q16-x64-dll.exe Contained a virus and was deleted.

In looking at the logs, it shows that the Trojan "Trojan:Win32/Clavior.G!d" was found.

This is on a Windows 7 platform. I decided to research instead of moving forward. Please let me know what I can do to help. I have used ImageMagick several times throughout the years and I have never had a problem that wasn't explained by a loose wingnut at the key board. A new computer deserves a new install.

Thank you,

Joel

[mayya17]

1. Check file at virustotal
2. Turn off firewall\antivirus
3. Run setup
4. Turn on firewall\antivirus
or
run as an administrator

[snibgo]

If Windows Defender is (mis-)reporting that IM has a virus, I think this needs fixing by the IM developers.

Of course, there are workarounds --- we can disable virus checking. But this is bad practice, and we shouldn't need to.

Personally, I'm confident the IM developers haven't installed a virus in IM. But I can't be certain that hackers haven't changed the binary and sha256 digest. I never install software that an anti-virus program reports as dodgy.

[magick]

We build ImageMagick on AppVeyor which is a controlled environment. We keep copies of the original builds on a secure remote location. Checking the Windows binaries against these reference binaries shows no mods to the binary since it was released. We do have an upcoming release this weekend which hopefully will quell the noise from the virus scanners.