Enigma Virtual Box

Issues related to Enigma Virtual Box
scorillo7
Posts: 90
Joined: Mon May 11, 2009 11:16 am

Re: Enigma Virtual Box

Post by scorillo7 »

mlmsoft wrote:Yes, but packed exe have also 1 result. That tells me that in future it can be 3,4 or more false positive results. That also tells me that I can not use it. We have customer with 154 PC's on LAN (and many with 100+ PC's).
Once, we make a mistake, but never more!
For ActiveX problem (can not be registered if user is not logged as admin) we have developed a service app which do that on software upgrade.
It is easier to take care of one file instead of 20 or 30, but unfortunately neither Enigma Virtualbox did not solve the problem with antivirus programs.
I do not know a protector which not have problem with AV programs,all are detected on a form or other.
Regarding activex problem this is a pain in a.. for a vb programmer but can be resolved.Question,why so many activex to be registered,they are third-parties or are your work?
Enigma
Site Admin
Posts: 2939
Joined: Wed Aug 20, 2008 2:24 pm

Re: Enigma Virtual Box

Post by Enigma »

mlmsoft wrote:Yes, but packed exe have also 1 result. That tells me that in future it can be 3,4 or more false positive results. That also tells me that I can not use it. We have customer with 154 PC's on LAN (and many with 100+ PC's).
Be sure, we can't solve it from our side, you have to contact to antivirus, send them a false detected file and ask to solve this detection, only this way it can be solved. Instructions, how to send false detections for particular antiviruses are there:
http://enigmaprotector.com/forum/viewto ... 1&start=20

I do not think that Enigma Virtual Box will be detectable by many antiviruses in the future. It has simple structure, I'm sure antivirus developers will learn it soon.

Regarding ActiveX - yes, frustrating but you are right. But there are also good news, soon there will be added emulation of registry, so all ActiveX will be registered at virtual registry and there will not be needed admin privileges.
KeyGen
Posts: 12
Joined: Fri Jun 12, 2009 4:38 pm

Enigma Virtual Box

Post by KeyGen »

First of all, thanks to Enigma! I get it Enigma Virtual Box free of cost and which is unbelievable. And near future it's would be more precious and updated. I saw on Enigma Protector increases popularity day by day and I think very strong protector. Like Enigma Protector, Enigma Virtual Box will gain popularity. And soon recover all others issue.

K.

Sorry for my bad English. :x
newuser
Posts: 49
Joined: Tue Apr 13, 2010 5:43 pm

Re: Enigma Virtual Box

Post by newuser »

Wow, a free packer for me. :D Thanks alot. I could live with the virus false alarm, since I haven't seen any software/packer that never give a false alarm before.

For distribution in a network environment, it depends how its setup, does the antivirus installed only in the server or included all client computers too?
If its the former only, just use an archive utility and compress into a self extracting exe file. If the file is only going to be distrubuted into client computers and not the server itself. I know, I do it often. ;)
Tony
Posts: 41
Joined: Mon Jul 12, 2010 1:53 pm

Re: Enigma Virtual Box

Post by Tony »

I was wondering, how secure is the files packed into the virtual box from getting unpacked? Are there any ways to extract it out or unpack it? And how could i make it more secure.
scorillo7
Posts: 90
Joined: Mon May 11, 2009 11:16 am

Re: Enigma Virtual Box

Post by scorillo7 »

Tony wrote:I was wondering, how secure is the files packed into the virtual box from getting unpacked?.
Is just a step,it's a utility is not intended to be bulletprof protection.Is enough protection for newbie crackers until middle range.

Tony wrote:Are there any ways to extract it out or unpack it?
If is running can be cracked.

Tony wrote:And how could i make it more secure.
Buy Enigma Protector.


Post Scriptum:
The full power of Enigma protection is available only for a programmer.
mlmsoft
Posts: 8
Joined: Tue Oct 05, 2010 11:21 am

Re: Enigma Virtual Box

Post by mlmsoft »

Enigma wrote:Yes, absolutely agree with scorillo7, this is very WELL results, only 3 false detections, moreover, they could be very easily solved if follow the link I provided above.
I was do that with previous version of Virtual software (commercial). Some of antivirus companies have "white enabled" our exe, some not. They just don't answered, or tell us that they do that, but don't.
After few months, some companies which have "white enabled" our software, have again detected it as virus.
Then we have some kind of "private template" from commercial Virtual software developer (they have contacted antivirus software and arranged that), and it worked for few months. After that, it was not worked, and nobody (antivirus and Virtual application developers) will not answer to our mail.
We haven't choice but drop it.

[/quote]
Soon, the new version of Enigma Virtual Box will be release, it will contain a very deep virtualization, after that we will try to solve false detections of Enigma VB itself.[/quote]

That's great. As I said before, I will watch this forum, and we need such software (even commercial), but when it have only one false positive alarm, we can not use it. I understand that antivirus companies should do something, like I can see on this forum, but trust me, I have wroted them (before) and that's only they decision. Usually, you can forget about it, it's just theory.
scorillo7
Posts: 90
Joined: Mon May 11, 2009 11:16 am

Re: Enigma Virtual Box

Post by scorillo7 »

Almost every AV has exception list work on that on clients.
Enigma
Site Admin
Posts: 2939
Joined: Wed Aug 20, 2008 2:24 pm

Re: Enigma Virtual Box

Post by Enigma »

KeyGen wrote:First of all, thanks to Enigma! I get it Enigma Virtual Box free of cost and which is unbelievable. And near future it's would be more precious and updated. I saw on Enigma Protector increases popularity day by day and I think very strong protector. Like Enigma Protector, Enigma Virtual Box will gain popularity. And soon recover all others issue.
Frustrating, but last month there are increasing purchases of Enigma Protector with stolen credit card, this is like a behind of the popularity :( And yes, agree, this is a first absolutely free virtualization system, why not!
newuser wrote:Wow, a free packer for me.
Now exactly a packer :) but very near!
Tony wrote:I was wondering, how secure is the files packed into the virtual box from getting unpacked? Are there any ways to extract it out or unpack it? And how could i make it more secure.
That's very interesting question. Note, ALL files virtualization systems, that are based on API hooking (like Enigma Virtual Box and many many other, the systems that do not use API hooking are maybe only such huge applications like VMware and so on), if these tools are really well implemented (support file enumeration, dll loading etc) are EASY to extract files from. I will not explain techniques, but it is easy to extract embeded files from executables packed with these programs.

If anybody of developers of similar virtualization packers will assure you that it has a good protection - you should know, it is a lie.

You may protect emebeded files by using Enigma Protector and it's Virtual Box, but only if you will use complex application protection, with many features of Enigma Protector, if your whole protection will have a correct logic.
mlmsoft wrote:I was do that with previous version of Virtual software (commercial). Some of antivirus companies have "white enabled" our exe, some not. They just don't answered, or tell us that they do that, but don't.After few months, some companies which have "white enabled" our software, have again detected it as virus. Then we have some kind of "private template" from commercial Virtual software developer (they have contacted antivirus software and arranged that), and it worked for few months. After that, it was not worked, and nobody (antivirus and Virtual application developers) will not answer to our mail.We haven't choice but drop it.
I will tell you a small secret. There is developing universal solution for software protector vendors to avoid false detections of protected programs by antiviruses. There are involved almost all antivirus software vendors. But the solution is still in development, I do not know any timelines, do not know what it will be finally finished. Only know that it will work for Enigma Protector, but not for Enigma Virtual Box, since it is a freeware.

But regarding Enigma Virtual Box, anyway, I think it will be popular and since it has an easy structure, most antivirus engines will be able to unpack it soon and will be able to determinate the virus inside without problems, and moreover, without false detections.

But for now - you may only send false detections to AV companies.

By the way, as per my experience, many customers of Enigma Protector were able to get zero detections from all AV on virustotal, but Enigma Virtual Box is much easy, and I think there will not be problems to eliminate false detections!

scorillo7 - thanks for discussion :)
Tony
Posts: 41
Joined: Mon Jul 12, 2010 1:53 pm

Re: Enigma Virtual Box

Post by Tony »

Is there any difference with the commercial enigma virtual box and this freeware versions in security means as preventing it from getting extracted?
Post Reply