topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Friday April 19, 2024, 10:04 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: Malware?  (Read 8457 times)

sfeldner

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 3
    • View Profile
    • Donate to Member
Malware?
« on: April 22, 2014, 09:33 PM »
I'm note sure if someone has mentioned this before but, when I scan my computer for malware, spc.exe scans positive for "Malware.Packer.Gen".
It is the same across different downloads.  I'm guessing that Malware.Packer.Gen is not really malware. Does anyone know anything about this?

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,900
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: Malware?
« Reply #1 on: April 23, 2014, 01:54 AM »
I'm guessing that Malware.Packer.Gen is not really malware.

Your guess is correct.

There are a ton of threads on this forum (and every other software forum) about the insanely irresponsible practice of antivirus companies throwing these false positives when they encounter files that have been compressed or processed by some packager that they are unsure of.

The giveaway for people in the know is always in the name/label of the malware found.. It's always something like "generic packer" (or in your case "Packer.Gen").

That's code for "I don't know what this is so i'm going to label it as potential malware and scare everyone."

The best practice when you encounter something like that is to do what you are doing -- don't ignore it, don't assume it's a false alarm -- but be skeptical of your antivirus, and investigate as you are doing.

And typically the best thing to do is to upload the program in question to a place like https://www.virustotal.com/ where it will be scanned with tons of different engines, which will usually confirm that most engines report the program as safe.