ConfuserEx icon indicating copy to clipboard operation
ConfuserEx copied to clipboard

Published 20 hours ago • verified publisher icon mkaring

[Bug] When using `"anti tamper"` on an exe and checking it at "https://www.virustotal.com/gui/home/upload" it reports a virus

Open Smurf-IV opened this issue 2 years ago • 3 comments

  • ConfuserEx Version:
    • Latest
  • Target Framework:
    • net 48
  • Operating System:
    • Windows 10 22H2 x64

Steps to Reproduce: <protection id="anti tamper" />

Workaround: <protection id="anti tamper" action="remove" />

Smurf-IV avatar Jan 26 '23 11:01 Smurf-IV

its normal not a bug

Mrgaton avatar Feb 03 '23 11:02 Mrgaton

Perhaps it thinking that your file using dangerous (imports/sections, etc) Win API or something like that

sunnamed434 avatar Feb 03 '23 14:02 sunnamed434

I get this as well, but only 1 out of 50+ AV vendors flag a problem, so I consider it a false positive. Also, when a virus is reported, it is a "generic" detection, not a specific virus. So the AV vendor is basically saying "I don't like the look of this, it is trying to hide something". In your scenario, what gets detected by whom?

SimonBondyUltima avatar Feb 04 '23 10:02 SimonBondyUltima