trojan in imagemagick - false positive?

Viruses and worms
1

I just downloaded the latest release of ImageMagick from
http://www.imagemagick.org/download/binaries/ImageMagick-6.2.8-8-Q16-windows-dll.exe
and when installing it, Avast alerts about Win32:Inject-L in all the exe files. I contacted Imagemagick about it, and they say it must be a false positive. Can you check it out?
Best regards
Mike

2

Seems a false positive indeed…
Anyway, to be sure, please submit it to JOTTI or VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com Please, mention in the body of the message why you think it is a false positive and the password used.

3

Oh, I should mention that is was not the “setup” exe itself that alerted about the trojan, but rather during installation when the archived .exe:s were extracted.
One of them is convert.exe, and the JOTTI scan revealed this:

AntiVir X
ArcaVir X
Avast Win32:Inject-L
AVG Antivirus X
BitDefender X
ClamAV X
Dr.Web X
F-Prot Antivirus X
Fortinet X
Kaspersky Anti-Virus X
NOD32 X
Norman Virus Control X
UNA X
VirusBuster X
VBA32 X

I have sent the file and a description to virus@avast.com.

Best regards
Mike

4

Mikewse, thanks…
Hope Alwil team correct the false positive soon.