Page 1 of 1

Avira: TR/Crypt.XPACK.Gen3

Posted: Mon Oct 12, 2020 1:14 pm
by PfundsteinE
Hallo, we have upgraded VMProtect Prof. 3.1.2 to VMProtect Prof. 3.5

Unfortunately we can not use the version 3.5 in our build process.

The application exe file created by VmProtect_Con.exe will not be accepted by AVIRA. Avira detects TR/Crypt.XPACK.Gen3.
The reason is the usage of VMProtectDecryptStingW with 'smtp.ionos.de'.

We are using Delphi Tokyo 10.2.3:

Result := VMProtectDecryptStringW('smtp.ionos.de'); //Avira: Trojaner TR/Crypt.XPACK.Gen3

Furthermore I tested with 'smtp#ionos#de'. Avira now detects Trojaner TR/Crypt.XPACK.Gen2.
Result := VMProtectDecryptStringW('smtp#ionos#de'); //Avira: Trojaner TR/Crypt.XPACK.Gen2

Hopfully you can help me
Greetings Edmund

PS: the optons file is attached.

Re: Avira: TR/Crypt.XPACK.Gen3

Posted: Thu Oct 15, 2020 6:21 am
by Admin
It's called "false positives" that shows low quality of antivirus. We can recommend to use a code signing certificate for decrease "false positives".