False Negative Results of Antiviruses

Issues related to VMProtect
Post Reply
x22x22
Posts: 19
Joined: Sat Jul 20, 2019 2:33 pm

False Negative Results of Antiviruses

Post by x22x22 »

Hello,

Normally, my application virustotal result is 3/65. But when I try to use just virtualization (others are disabled memory protection, packing, etc...) on one function result changes as 15/65 and most antiviruses threat detection is "Gen:Variant.Ursu".

What should I do to decrease these false negative results?
Do you have any suggestion?

Image
Admin
Site Admin
Posts: 2584
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: False Negative Results of Antiviruses

Post by Admin »

Try to contact these antiviruses and inform them about this bug.

P.S. I don't see any "top" antiviruses in this list (like KAV, ESET), just only crap :))
x22x22
Posts: 19
Joined: Sat Jul 20, 2019 2:33 pm

Re: False Negative Results of Antiviruses

Post by x22x22 »

Can code signing certificate helps to decrease false negative results?
Admin
Site Admin
Posts: 2584
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: False Negative Results of Antiviruses

Post by Admin »

Do you really think that these guys check a code signature in own "products"? I don't think so. Anyway, you can check it by yourself.

P.S. It seems many of them use an engine from BitDefender.
x22x22
Posts: 19
Joined: Sat Jul 20, 2019 2:33 pm

Re: False Negative Results of Antiviruses

Post by x22x22 »

Thank you, I sent an email to bitdefender.
Post Reply