search

ajaxray / markpdf

Watermark PDF files using image or text
GNU Affero General Public License v3.0
175 stars 34 forks source link

Malware/virus #35

Open oysteinkrog opened 4 months ago

oysteinkrog commented 4 months ago

bilde

AlexanderMcColl commented 3 months ago

I've used this application to watermark pdf files for about a year now, and just today Windows Security (Defender) Antivirus has flagged it and quarantined it.

I checked Virus Total and then here.

Judging by how long it's been on my system, running real-time protection and regular full scans, I strongly strongly suspect this is a heuristic based false-positive.

Looking up one of the Virus Total entries:

"W32/Fragtor.1504!tr.ransom is classified as a ransomware trojan. A ransomware trojan is a type of malware that prevents or restricts the infected user from accessing their system, usually by locking the screen or encrypting the user's files. It then demands payment, usually in the form of cryptocurrency, in order for the system or files to be accessible again."

Probably because this application can programmatically make changes to the contents of files, in large batches, it looks like ransomware.

I don't have any knowledge of Go but we have the source code right here on Github and it hasn't changed since 2022 with zero reports of users getting infected.

It's a real shame when antivirus companies silently spread their heuristic engines and 'knock out' useful little tools like this. Probably led by 'AI processing'....

mindfulnessbergamo commented 1 day ago

Will someone please confirm from his own experience this is a safe application? Thanks.