Avira: TR/Crypt.XPACK.Gen3

Issues related to VMProtect
PfundsteinE
Posts: 1
Joined: Mon Oct 12, 2020 8:45 am

Avira: TR/Crypt.XPACK.Gen3

Postby PfundsteinE » Mon Oct 12, 2020 1:14 pm

Hallo, we have upgraded VMProtect Prof. 3.1.2 to VMProtect Prof. 3.5

Unfortunately we can not use the version 3.5 in our build process.

The application exe file created by VmProtect_Con.exe will not be accepted by AVIRA. Avira detects TR/Crypt.XPACK.Gen3.
The reason is the usage of VMProtectDecryptStingW with 'smtp.ionos.de'.

We are using Delphi Tokyo 10.2.3:

Result := VMProtectDecryptStringW('smtp.ionos.de'); //Avira: Trojaner TR/Crypt.XPACK.Gen3

Furthermore I tested with 'smtp#ionos#de'. Avira now detects Trojaner TR/Crypt.XPACK.Gen2.
Result := VMProtectDecryptStringW('smtp#ionos#de'); //Avira: Trojaner TR/Crypt.XPACK.Gen2

Hopfully you can help me
Greetings Edmund

PS: the optons file is attached.
Attachments
lignocam.exe.vmp.zip
(344 Bytes) Downloaded 11 times

Admin
Site Admin
Posts: 1932
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: Avira: TR/Crypt.XPACK.Gen3

Postby Admin » Thu Oct 15, 2020 6:21 am

It's called "false positives" that shows low quality of antivirus. We can recommend to use a code signing certificate for decrease "false positives".