The Enigma Protector False Positives

Enigma

Hello!

I have a question to BD developers: why does BD detect viruses in all files protected with Enigma Protector (http://www.enigmaprotector.com)?

There is not any kind of viruses in protected files but BD still detects it. Can you please eliminate this problem asap! Just a lot of customers use Enigma for software protection and they are really cruel about BD problem!

Also negative words: I tried to contact you by means your support form and still have not any reply (2 weeks without reply)!

Niels

Hello Enigma

Packer detection aren't real viruses but are general detections for inaccessible (=protected) or packed files but is mostly used by malicious software or legit software.

Take a look here BitDefender or any other antivirus have such a detection.

Live chat is quicker then email support. You can find it here. Choose technical support.That depends if you have a local support address or not. If it is support at bitdefender dot com that is the worldwide support address for countries who don't have local support.

Best regards

Niels

Enigma

Hello Niels!

I'm understand that it is only "packer" detection, BUT, Bitdefender alert on protected files similar with the virus files! I tried to scan protected files on http://virusscan.jotti.org and ONLY BD alert on virus present. Other antiviruses just check protection and give quiet results, but BD says that the file should be deleted/moved/other... how can I expain to users that it is only packer and not a virus?

If so, why your antivirus does not alert the same on other kind of protectors? ASProtect, upx, themida etc etc etc? These are dangerous softwares too? Why it so, can you explain?

Maybe this problem can be eliminated? It is easier you contact to developers, I know they can help!

Enigma

Here is result of virus scan of file protected with Enigma. You wrote "Take a look here BitDefender or any other antivirus have such a detection." - you have mistaked, ONLY BD detects virus!!!

A-Squared Found nothing

AntiVir Found nothing

ArcaVir Found nothing

Avast Found nothing

AVG Antivirus Found nothing

BitDefender Found Packer.Enigma.A

ClamAV Found nothing

CPsecure Found nothing

Dr.Web Found nothing

F-Prot Antivirus Found nothing

F-Secure Anti-Virus Found nothing

Fortinet Found nothing

Kaspersky Anti-Virus Found nothing

NOD32 Found nothing

Norman Virus Control Found nothing

Panda Antivirus Found nothing

Rising Antivirus Found nothing

Sophos Antivirus Found nothing

VirusBuster Found nothing

VBA32 Found nothing

Niels

Hello Enigma

First of all I am only a volunteer and I don't work for Softwin (BitDefender). But I will try to contact someone.

I meant that other antiviruses have also packer detection I didn't say that the other antiviruses also detects your protection. Sorry if that was not very clear.

I can't give you an answer why BitDefender doesn't react on all packers. My opinion is that they (Softwin) didn't add these signatures or they know that they are safe. You have to wait till one of the virus researchers replies. To receive a correct answer.

Best regards

Niels

vdemarines

I submitted a file protected with CodeArmor (http://www.vilabs.com) and saw no problems. I suspect Enigmaa protection process has modified the PE file in way that similar to Virus/trojan. You should do a static compare with CFF explorer and determine the differences

Enigma

Thanks Niels and codeplay for answers.

If it is possible to contact BD developers, just say them to contact to Enigma support team at support@enigmaprotector.com The Enigma developers made few features for antivirus companies for easier detection viruses in protected files.

Niels

Hello Enigma

Some of the virus researchers is going to take a look at your issue. But I can't guarantee that it will be fixed this weekend.

Best regards

Niels

Unknown

I understood that one of our researcher has requested some samples and info, if you have sent them then the issues shall be resolved.

Enigma

Hello Florin, ok, please, give me email address of your researchers and I will send it to Enigma developers, they will give you all information about secure features!! or contact to support@enigmaprotector.com

Thanks!