Avira putting TR/Crypt.XPACK.Gen in quarantine

LMesk · 02-28-2021, 05:16 AM

Hi, I juste download the 5.12.0 update of Calibre with the link from the logiciel and my antivirus (Avira) send my a notification saying that he put the file TR/Crypt.XPACK.Gen in quarantine because he recongnize it as a trojan horse. I don't understand, Calibre is a fantastic tool but I trust my antivirus so what is the TR/Crypt.XPACK.Gen file ?

georgemk · 02-28-2021, 06:59 AM

TR/Crypt. XPACK. Gen is the generic name for threats detected by Avira and categorized as unknown Trojans
So Avira cannot identify a known threat but it thinks there is one.
Funnily enough Microsoft Defender doesn't find any issue with Calibre V5.12 and I would rather trust that.

kovidgoyal · 02-28-2021, 07:36 AM

https://manual.calibre-ebook.com/faq...a-virus-trojan

Dizpo · 06-11-2022, 07:54 AM

Yeah, disabling before installation works, the first time. But then it catches "calibre.exe" and quaranteens it along with all the other associated .exe's. It (Avira Pro) won't allow you to put exceptions on these exe's even if you restore them from quaranteen. In fact, Avira won't let you access the programs even after quaranteen restore. Avira is a massive pain. Only solution is to choose which program you prefer, Avira Antivirus or Calibre. Hmmm...

Quoth · 06-11-2022, 10:29 AM

Get rid of Avira.
Use uMatrix, or noScript or uBlockOrigin or similar and block 3rd party scripts in browser.
Block remote content in email.
Don't download programs from dodgy sites, especially "free" versions of pay only programs.
Don't open unexpected attachments in email.
Don't check out random USB stick you found.
If Windows, turn on show file endings and learn which ones can execute (inc scripts).
Turn off scripting in MS Office before opening any 3rd party doc received.
Use alternate to Adobe PDF, don't view PDF in Browser, turn off Scripting in PDF viewer.
Don't open documents in Browser, download them.

AV programs are notorious for false positives and missing new threats. Doing all above works better. On Windows the MS Defender is less bother than any 3rd party.
Only activate AV before adding removable storage (from 3rd party) or downloading an executable, otherwise have it completely disabled.

JSWolf · 06-11-2022, 10:52 AM

Avira is garbage. Delete it and never look back.

If you run Windows, just use the AV that comes with Windows as it works much better.

02-28-2021, 05:16 AM	#1
LMesk Junior Member Posts: 1 Karma: 10 Join Date: Feb 2021 Device: none	Avira putting TR/Crypt.XPACK.Gen in quarantine Hi, I juste download the 5.12.0 update of Calibre with the link from the logiciel and my antivirus (Avira) send my a notification saying that he put the file TR/Crypt.XPACK.Gen in quarantine because he recongnize it as a trojan horse. I don't understand, Calibre is a fantastic tool but I trust my antivirus so what is the TR/Crypt.XPACK.Gen file ?

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Greetings from within self-quarantine!	TryWait	Introduce Yourself	2	04-03-2020 06:02 PM
Picking up my kitty from evil government quarantine	Pizza_Cant_Read	Lounge	18	12-07-2018 04:47 PM
TALES FROM THE CRYPT	Ricky D'Angelo	General Discussions	19	11-28-2016 05:09 AM
Aura H2O Troubleshootings Calibre and Avira	souns	Kobo Reader	7	06-19-2016 07:18 PM
QUARANTINE - A Sci-Fi Thriller Set In East Africa	brinlingfm	Self-Promotions by Authors and Publishers	1	01-30-2011 06:00 AM

02-28-2021, 06:59 AM	#2
georgemk Addict Posts: 236 Karma: 291844 Join Date: Oct 2019 Device: Kobo Nia	TR/Crypt. XPACK. Gen is the generic name for threats detected by Avira and categorized as unknown Trojans So Avira cannot identify a known threat but it thinks there is one. Funnily enough Microsoft Defender doesn't find any issue with Calibre V5.12 and I would rather trust that.

02-28-2021, 07:36 AM	#3
kovidgoyal creator of calibre Posts: 44,008 Karma: 22669822 Join Date: Oct 2006 Location: Mumbai, India Device: Various	https://manual.calibre-ebook.com/faq...a-virus-trojan

06-11-2022, 07:54 AM	#4
Dizpo Junior Member Posts: 1 Karma: 10 Join Date: Jun 2022 Device: Calibre on PC	Yeah, disabling before installation works, the first time. But then it catches "calibre.exe" and quaranteens it along with all the other associated .exe's. It (Avira Pro) won't allow you to put exceptions on these exe's even if you restore them from quaranteen. In fact, Avira won't let you access the programs even after quaranteen restore. Avira is a massive pain. Only solution is to choose which program you prefer, Avira Antivirus or Calibre. Hmmm...

06-11-2022, 10:29 AM	#5
Quoth the rook, bossing Never. Posts: 11,617 Karma: 87456643 Join Date: Jun 2017 Location: Ireland Device: All 4 Kinds: epub eink, Kindle, android eink, NxtPaper11	Get rid of Avira. Use uMatrix, or noScript or uBlockOrigin or similar and block 3rd party scripts in browser. Block remote content in email. Don't download programs from dodgy sites, especially "free" versions of pay only programs. Don't open unexpected attachments in email. Don't check out random USB stick you found. If Windows, turn on show file endings and learn which ones can execute (inc scripts). Turn off scripting in MS Office before opening any 3rd party doc received. Use alternate to Adobe PDF, don't view PDF in Browser, turn off Scripting in PDF viewer. Don't open documents in Browser, download them. AV programs are notorious for false positives and missing new threats. Doing all above works better. On Windows the MS Defender is less bother than any 3rd party. Only activate AV before adding removable storage (from 3rd party) or downloading an executable, otherwise have it completely disabled.

06-11-2022, 10:52 AM	#6
JSWolf Resident Curmudgeon Posts: 74,590 Karma: 130140792 Join Date: Nov 2006 Location: Roslindale, Massachusetts Device: Kobo Libra 2, Kobo Aura H2O, PRS-650, PRS-T1, nook STR, PW3	Avira is garbage. Delete it and never look back. If you run Windows, just use the AV that comes with Windows as it works much better.

Advert

Advert