DVDFab 13.0.3.8 gives virus warning

[servie_b]

When trying to update to DVDFab 13.0.3.8 Eset gives a warning that a variant of Win64/Packed.VMProtect.X suspect executable has been found, so the pop up if DVFAb is allowed to change the system settings does not pop up

[Rich86]

13038 install (Win10) behaved a bit strangely here also. I downloaded & launched the off-line installer package & it ran with no virus warnings, but it didn't know I am a 365 user after the install. I closed out DVDFab and relaunched it, now it seems to behave normally. I have messaged support about the issue.

[Boogywooler]

Same issue, DVDFab upgrade to current version 13.0.3.8 - DRMRemoval.exe

4/14/2025 1:22:30 PM;Real-time file system protection;file;C:\Program Files\DVDFab\DVDFab 13\DRMRemoval.exe;a variant of Win64/Packed.VMProtect.X suspicious application;cleaned by deleting;GOOBY\bradd;Event occurred on a new file created by the application: C:\Users\bradd\AppData\Local\Temp\DVDFab13\F9D7F33 0E10F4CC8B1F49CCC80899245\DVDFab_13_x64_setup.exe (9E71649F3A894786AF64820ABB145C1592AC4AAE).;943980 D45059D7CC57806E13F9E154FF02AA22AC;12/27/2023 5:12:54 PM

[Darkwalker]

I am getting the same error when trying to upgrade to 13.0.3.9. ESET is removing the file DRMRemoval.exe.

[Boogywooler]

getting the same error when trying to upgrade to 13.0.3.9. ESET is removing the file DRMRemoval.exe

[Rich86]

I just downloaded and installed 13039 also with no issues.
Have you communicated this issue to ESET Cybersecurity in case they are flagging something that is not actually a threat?

[Stan001]

I was just going to post myself, it's most likely a false positive. Weird, they don't post checksums to assure members that the file they get is what it is. Like they do for DVDFAB Mac and StreamFab.

Only a few show this. 98% pass it as fine. VirusTotal - File - ab86b89c6b85662c19180c49b02b2803ec2c7839fcd7cdf734 f696087b91df12
Just the fact that the report said 'Signature verification
File is not signed' could possibly cause it to show as a virus.

It could also be just because it's removing DRM, just going by the name DRMRemoval.

If it keeps showing, exclude the file from the antivirus you use. I did Malwarebytes and Windows Defender scans myself, and they also came up clean.

[october262]

I was just going to post myself, it's most likely a false positive. Weird, they don't post checksums to assure members that the file they get is what it is. Like they do for DVDFAB Mac and StreamFab.

Only a few show this. 98% pass it as fine. VirusTotal - File - ab86b89c6b85662c19180c49b02b2803ec2c7839fcd7cdf734 f696087b91df12
Just the fact that the report said 'Signature verification
File is not signed' could possibly cause it to show as a virus.

It could also be just because it's removing DRM, just going by the name DRMRemoval.

If it keeps showing, exclude the file from the antivirus you use. I did Malwarebytes and Windows Defender scans myself, and they also came up clean.

see here for the checksums - https://forum.dvdfab.cn/forum/dvdfab...025#post461801

[Stan001]

see here for the checksums - https://forum.dvdfab.cn/forum/dvdfab...025#post461801

Thanks for pointing that out. I found it, now, best to go to Latest Official Releases - DVDFab Forum (for checksums) of all versions.

This will 100% confirm that users have the official download, without a virus/trojan (by checking checksums once downloaded).
Malwarebytes has a huge reputation and finds the file(s) clean of any virus/trojan, or any other detection.