Jump to content

ImageMagick for Windows - mogrify.exe - blocked as ransomware - really?


dwilbank
 Share

Recommended Posts

Hello,

This is the software installer I used, and it's the mogrify.exe file within that is being flagged as ransomware.

https://download.imagemagick.org/ImageMagick/download/binaries/ImageMagick-7.1.0-4-Q16-HDRI-x64-dll.exe

mogrify.exe worked just fine yesterday, and today it just gets deleted by MWB.

Even reinstalling ImageMagic doesn't help. MWB immediately deletes it.

Is it a common thing for other suspect files (which MWB isn't flagging) to infect legit files (like this one should be)?

 

Link to post
Share on other sites

  • Staff

This was a behaviour detection that antiransomware picked up. It was probably changing some files. Anything is possible with a crack. But most dont infect files. They may replace them but true viruses that actually infect a file are not common at all these days. 

 

Link to post
Share on other sites

  • Staff

@dwilbank - can you please run our support tool and attach the zip file it creates? I'd like to take a look with more detail at this detection event.

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.