1.61 / 1.62 problem with AVG

Post here messages if you have any problems with working of Enigma Protector
Post Reply
rconn
Posts: 19
Joined: Wed Dec 10, 2008 4:38 pm

1.61 / 1.62 problem with AVG

Post by rconn »

I'm having some occasional problems with a protected DLL & AVG antivirus. AVG is reporting a (false) positive on the DLL on about 1/3 of the builds:

Threat name: Virus found Win32/Heur
Detected on open.

No problem with other antivirus apps (Symantec, McAfee, Avast).

Anybody else seeing this?

Rex Conn
JP Software
Enigma
Site Admin
Posts: 2939
Joined: Wed Aug 20, 2008 2:24 pm

Re: 1.61 / 1.62 problem with AVG

Post by Enigma »

Hi Rex, you are right, sometimes there are occurs false positive detection of viruses in protected applications. It is not your/our problem, it is deal of avtivirus companies. As they are telling: "we can be mistaken and false positives may occurs on even clear files, the decision to solve this problem is very easy - send your file to our research team". Every antivirus company has special team that research files and it can eliminate false positives.

So, to solve problem:
- find email of research team of AVG on their site and send them protected file.

I will post here links to the research team of Antivirus Companies research teams, you may write them back and asking to solve false positives.

- Kaspersky Antivirus
#################################### (got from http://forum.kaspersky.com/index.php?showtopic=13881)
1) Put the suspected virus in a password-protected zip or rar file.
2) Compose an email message (only short description) and attach the zip file.
3) Include the password in the body/subject of the email. If you suspect a false positive, then include "Possible false positive" in the subjectline.
4) Send the zip/rar file to newvirus@kaspersky.com
####################################

- AVG Antivirus
#################################### (got from http://freeforum.avg.com/read.php?4,104 ... kpage=,sv=)
First update your AVG Free Edition and run the AVG Free Edition test again to verify that the issue has not already been corrected if it is a false positive. If it still detects the malware and you suspect a file to be a false positive. Test the file at [virusscan.jotti.org] or alternatively at [www.virustotal.com] and if it is a false positive, archive (zip, arc, tar etc) the file using a password and email a copy to virus@avg.com with a brief description as well as the password you used to archive it with. To test the file you may have to restore the file from the virus vault and may have to disable the Resident Shield in order to allow the upload for the test.
####################################
Post Reply