4 Replies Latest reply on Jul 27, 2016 2:46 AM by bekri

Is this a false positive? 'TR/Crypt.XPACK.Gen [trojan]' detected in 1 of Photoshop CC's files

Mr. Eveready Jan 18, 2014 4:23 PM

I was doing an update of Photoshop CC via Creative Cloud when this popped up:

Virus or unwanted program 'TR/Crypt.XPACK.Gen [trojan]'

detected in file 'C:\Program Files (x86)\Adobe\Adobe Photoshop CC\RTA08570.

I would like to confirm if this is a false positive. It's the first time I got this. I am using Avira Antivirus on a Windows 7 laptop.

Thanks!

1. Re: Is this a false positive? 'TR/Crypt.XPACK.Gen [trojan]' detected in 1 of Photoshop CC's files

Noel Carboni Jan 18, 2014 4:37 PM (in response to Mr. Eveready)

Probably not a false positive. I've got no file by that name in my Photoshop folder...

Could be malware dropped in that folder by some other agent.

Caveat: I don't know whether that's a legitimate filename used when installing the software. I got no hits using Avast! when installing here.

-Noel
Like Show 0 Likes(0)

Actions
2. Re: Is this a false positive? 'TR/Crypt.XPACK.Gen [trojan]' detected in 1 of Photoshop CC's files

Mr. Eveready Jan 18, 2014 4:37 PM (in response to Noel Carboni)

Thanks for the quick reply, Noel. Currently scanning whole system right now as I do not know where I could've gotten that.
Like Show 0 Likes(0)

Actions
3. Re: Is this a false positive? 'TR/Crypt.XPACK.Gen [trojan]' detected in 1 of Photoshop CC's files

Chris Cox Jan 18, 2014 8:17 PM (in response to Mr. Eveready)

It could have been dropped there by something else, or could have been a temporary file used by the installer (which would have been a false positive).
Like Show 0 Likes(0)

Actions

bekri Jul 27, 2016 2:46 AM (in response to Mr. Eveready)

I have similar problem. Installed Photoshop CS6 by using CreativeCloud and during update Avira gave the same response.

Type:	File
Source:	C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\RTA82530
Status:	Infected
Quarantine object:	0a2b997c.qua
Restored:	NO
Uploaded to Avira:	NO
Operating system:	Windows XP/VISTA Workstation/Windows 7
Search engine:	8.03.40.102
Virus definition file:	8.12.106.224
Detection:	TR/Crypt.XPACK.Gen2
Date/Time:	27.7.2016, 11:34

Go to original post