wintonson Posted June 24, 2019 Report Share Posted June 24, 2019 Every time I try to launch GOG, GalaxyClient.exe, I get "Warning! Process Blocked." Detection Name: W32.MAP.Ransomware.rewrite How can I allow this program? Link to comment Share on other sites More sharing options...
wintonson Posted June 24, 2019 Author Report Share Posted June 24, 2019 (edited) Now I cannot launch it even after I ended Immunet through task manager :S What did Immunet do to this file? edit: Uninstalled Immunet and reboot. GOG is working again but would like to find a fix to my problem so I can install Immunet again. Edited June 24, 2019 by wintonson added info Link to comment Share on other sites More sharing options...
ritchie58 Posted June 25, 2019 Report Share Posted June 25, 2019 I've heard of GOG before myself. It's a gaming client. I would first suggest you report this as a False Positive at this link. http://www.immunet.com/false_positive You would need to obtain the SHA256 hash for the .exe for a proper FP report. If you contact the software developers I'm sure they can provide that vital information we need to white-list that executable. If you still currently want to use the gaming client and Immunet you can create a custom Exclusion rule for the executable. First open the UI & click on Settings -> Scroll down to Add New Exclusion & click on that -> you can either type in the file name manually or use the Browse feature -> once the file is typed in or located with the Browse button click on Add Exclusion -> click Apply. If you still run into conflicts with Immunet it may be necessary to create an additional Exclusion rule for the GOG software's entire Program Files folder as well. I hope you find this info helpful. Cheers, Ritchie... Link to comment Share on other sites More sharing options...
Spatha Posted January 22, 2020 Report Share Posted January 22, 2020 Hello, I got the same blocking with Mp3Tag, a freeware I use to modify .MP3, .FLAC & others medias files... Link to comment Share on other sites More sharing options...
ritchie58 Posted January 22, 2020 Report Share Posted January 22, 2020 Hi Spatha, If you're sure your copy of the software is not malicious (you can use VirusTotal to check to make sure https://www.virustotal.com/gui/home/upload) I would suggest you also report that as a False Positive like I advised wintonson at our FP reporting site. https://www.immunet.com/false_positive You can still use the software if you create a custom exclusion rule with Immunet as I described in my last thread to this topic. Cheers, Ritchie... Link to comment Share on other sites More sharing options...
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now