Virus

Discussion related to AES Crypt, the file encryption software for Windows, Linux, Mac, and Java.
Post Reply
scoubidou
Posts: 4
Joined: Sat Sep 27, 2014 10:20 pm

Virus

Post by scoubidou » Wed Jun 17, 2015 9:00 pm

Hello,

3 antivirus are finding a virus in AEScrypt :
https://www.virustotal.com/fr/file/1a82 ... 434574269/

User avatar
paulej
Posts: 524
Joined: Sun Aug 23, 2009 7:32 pm
Location: Research Triangle Park, NC, USA
Contact:

Re: Virus

Post by paulej » Thu Jun 18, 2015 5:45 am

Some antivirus software does report AES Crypt as potential malware. We worked with some antivirus companies to address this, but some make it incredibly hard to reach them when you're not a customer.

Anyway, you'll note none call AES Crypt a virus. It's labeled as suspicious, etc. What happened is that people creating ransomware software (malware used to encrypt files and extort victims to decrypt those files) used our software as the engine to carry out their misdeed. That resulted in our software being inappropriately classified by some AV software makers.

To be sure you do have clean software, you can check the hash of the download file against the PGP-signed file linked at the bottom of the page. It's signed with my PGP key.

scoubidou
Posts: 4
Joined: Sat Sep 27, 2014 10:20 pm

Re: Virus

Post by scoubidou » Sun Apr 03, 2016 12:27 pm

Or perhaps the same problem than with DVDstyler ? Its author solved it with a new version of InnoSetup : https://sourceforge.net/p/dvdstyler/bugs/617/

User avatar
paulej
Posts: 524
Joined: Sun Aug 23, 2009 7:32 pm
Location: Research Triangle Park, NC, USA
Contact:

Re: Virus

Post by paulej » Sun Apr 03, 2016 3:56 pm

Likely, the new setup changed the package to a point that the signature the virus scanner was detecting isn't there now.

In any case, I'm using Microsoft's setup tool presently. Also, I think most or all of the warnings are cleared now. The virus scanner guys -- at least those that provide contact info -- are good at accepting my feedback and then clearing the false detections. Some, like Smith Micro, did not provide contact info when I looked. In any case, it's not worth it to chase down every package.

Post Reply