Virus Scanner at virustotal.com

Post here messages if you have any problems with working of Enigma Protector
Post Reply
jensen82
Posts: 3
Joined: Tue Feb 15, 2011 10:19 pm

Virus Scanner at virustotal.com

Post by jensen82 »

Hi!

I scanned an "enigma-protected-file" via www.virustotal.com and got the following result:

AntiVir (also known as Avira)=TR/Crypt.XPACK.Gen
BitDefender=Gen:Variant.Barys.78
Emsisoft=Trojan.Win32.Spy!IK
F-Secure=Gen:Variant.Barys.78
GData=Gen:Variant.Barys.78
Ikarus=Trojan.Win32.Spy

Is it possible to fix it? It's a problem...
jensen82
Posts: 3
Joined: Tue Feb 15, 2011 10:19 pm

Re: Virus Scanner at virustotal.com

Post by jensen82 »

Does "signing the file" or report it to the Anti-Virus-Software fix the problem?

Thank you very much!
Enigma
Site Admin
Posts: 3085
Joined: Wed Aug 20, 2008 2:24 pm

Re: Virus Scanner at virustotal.com

Post by Enigma »

Hi jensen82,

Yes, it is easy enough to solve this problem.

Take a look at our blog, there is written how to fix it:
http://www.softwareprotection.info/2011 ... -to-solve/

You have to submit false detection sample to only 3 company:
1. BitDefender, post your sample on their forum: http://forum.bitdefender.com/index.php?showforum=138
This will also solve problem with F-Secure and GData.
2. Send sample at false-positive@ikarus.at this solves problem with Ikarus and Emsisoft
3. Report detection to Antivir, upload file at http://analysis.avira.com/samples/index.php
But by experience, Antivir takes about 2 weeks to analyze the sample.

Digital Signing should also help to fix the problem.
AfriCola
Posts: 1
Joined: Wed Feb 20, 2013 8:06 pm

Re: Virus Scanner at virustotal.com

Post by AfriCola »

I know a very old Topic.
But my developed Programs are detected as Trojan/Worm.

This detect Enigma as Trojan.Agent, what a lot User have installed:
http://www.malwarebytes.org/

and Virus Total show up:
Agnitum: Suspicious!SA
eSafe: Suspicious File
Ikarus: Worm.Win32.Nuqel
McAfee-GW-Edition: Heuristic.LooksLike.Win32.Suspicious.R
VIPRE Trojan.Win32.Packer.EnigmaProtector1.1X-1.3X (ep)
lucky the Results are most from very rare Scanner.
The Major Scanner dont find anything.

As i read here, i can only send my Tools to the Firms directly ?
Enigma
Site Admin
Posts: 3085
Joined: Wed Aug 20, 2008 2:24 pm

Re: Virus Scanner at virustotal.com

Post by Enigma »

Hi AfriCola,

Yes, you have to send the protected sample to the AV and ask to fix the problem.

You may also digitally sign the protected executable, usually, this also helps to reduce the number of false detections.

And note, checking the file at virustotal may only increase the number of false detections. We do not recommend to use it in any case!
Post Reply