Malware/virus

[oysteinkrog]

[AlexanderMcColl]

I've used this application to watermark pdf files for about a year now, and just today Windows Security (Defender) Antivirus has flagged it and quarantined it.

I checked Virus Total and then here.

Judging by how long it's been on my system, running real-time protection and regular full scans, I strongly strongly suspect this is a heuristic based false-positive.

Looking up one of the Virus Total entries:

"W32/Fragtor.1504!tr.ransom is classified as a ransomware trojan.
A ransomware trojan is a type of malware that prevents or restricts the infected user from accessing their system, usually by locking the screen or encrypting the user's files. It then demands payment, usually in the form of cryptocurrency, in order for the system or files to be accessible again."

Probably because this application can programmatically make changes to the contents of files, in large batches, it looks like ransomware.

I don't have any knowledge of Go but we have the source code right here on Github and it hasn't changed since 2022 with zero reports of users getting infected.

It's a real shame when antivirus companies silently spread their heuristic engines and 'knock out' useful little tools like this. Probably led by 'AI processing'....

[mindfulnessbergamo]

Will someone please confirm from his own experience this is a safe application? Thanks.

[AlexanderMcColl]

All I can say is that I've continued to use this since my comment in July, so 5 months now, with the folder whitelisted in Windows Security. I haven't noticed any unusual behaviour from the application. My PC functions as normal. I have a software firewall and it has never attempted to connect to the Internet.

For those wondering, no, it isn't a virus. It's just a false positive.

[qiukaijia]

I use chrome download the exe on win11, chrome forbid this exe and remove it