Home | Blog | Software | Reviews and Features | Forum | Help | Donate | About us
topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • December 04, 2016, 02:20:31 PM
  • Proudly celebrating 10 years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: Does the software contain virus PECompact?  (Read 8556 times)

brate

  • Participant
  • Joined in 2007
  • *
  • default avatar
  • Posts: 4
    • View Profile
    • Donate to Member
Does the software contain virus PECompact?
« on: March 16, 2007, 09:15:24 AM »
I download the url snooper 2 LATEST RELEASE(v2.18.01 Beta)
from the official site(http://www.donationc...loads/URLSnooper.exe)
It was reported by my Kaspersky Anti-virus that this program was infected by a virus called PECompact.

Same problem for the PREVIOUS RELEASE(v2.14.02) from http://www.donationc...table/URLSnooper.exe
also report a "PECompact" virus?

I wanna whether this is true or kaspersky reported wrongly.


f0dder

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,029
  • [Well, THAT escalated quickly!]
    • View Profile
    • f0dder's place
    • Read more about this member.
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #1 on: March 16, 2007, 09:21:41 AM »
PECompact is an executable compressor that reduces file size of programs. It's not a virus, but kaspersky detects things that aren't viruses... too bad it doesn't make it clear what exactly it's detecting. I wonder if it does this for UPX and other compressors as well?

PECompact is from http://www.bitsum.com , and written by Jeremy Collake who is a member here as well.
- carpe noctem
« Last Edit: March 16, 2007, 09:26:08 AM by f0dder »

brate

  • Participant
  • Joined in 2007
  • *
  • default avatar
  • Posts: 4
    • View Profile
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #2 on: March 16, 2007, 10:25:14 AM »
it was reported as "PECompact(modified)"
don't know why it was marked as "modified".

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 36,406
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #3 on: March 16, 2007, 11:37:58 AM »
If you do a search for PECompact you will see it is a very reputable
program "compressor", it has nothing whatsoever to do with a virus --
it's just kaspersky being overly paranoid (or irresponsibly scaring
people if you ask me).  It's definitely not a virus.

I will email kaspersky and see if i cant get them to fix this before
they scare more people.  It's unfortunately not so uncommon for
antivirus programs to false alarm on stuff.

-Jesse (mouser)
 (author of URL Snooper)

nosh

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,426
    • View Profile
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #4 on: March 16, 2007, 03:23:18 PM »
Maybe it can't unscramble the compressed code thoroughly to see if it's infected or not so it gives you a heads-up to play safe.

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 36,406
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #5 on: March 16, 2007, 03:59:02 PM »
Quote
Maybe it can't unscramble the compressed code thoroughly to see if it's infected or not so it gives you a heads-up to play safe.

There is some logic to this, but what these antivirus programs should do is say:
"program xxxx could not be analyzed fully and so i can't determine if it's safe"
that would be fair
but instead all antivirus program seem prone to saying "DANGER!! VIRUS!!!"
when they are not sure.

brate

  • Participant
  • Joined in 2007
  • *
  • default avatar
  • Posts: 4
    • View Profile
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #6 on: March 16, 2007, 08:41:49 PM »
If you do a search for PECompact you will see it is a very reputable
program "compressor", it has nothing whatsoever to do with a virus --
it's just kaspersky being overly paranoid (or irresponsibly scaring
people if you ask me).  It's definitely not a virus.

I will email kaspersky and see if i cant get them to fix this before
they scare more people.  It's unfortunately not so uncommon for
antivirus programs to false alarm on stuff.

-Jesse (mouser)
 (author of URL Snooper)

I see, thx.

Wordzilla

  • Forum Search Daemon
  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 470
  • Two there should be; no more, no less.
    • View Profile
    • FreeThesaurus.net - The Free Online Synonym Finder
    • Read more about this member.
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #7 on: March 16, 2007, 08:55:28 PM »
brate:

A current solution for you would be to update Kaspersky virus definition to it latest, or use Kaspersky 6.0 + latest definition.

When I tried Kaspersky 6.0 a few weeks ago, all of my installed DC programs got deleted initially because of this 'PECompact' false positive. After updating the virus definition, Kaspersky allowed these apps to run happily ever after. ;D

f0dder

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,029
  • [Well, THAT escalated quickly!]
    • View Profile
    • f0dder's place
    • Read more about this member.
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #8 on: March 17, 2007, 09:55:59 AM »
When I tried Kaspersky 6.0 a few weeks ago, all of my installed DC programs got deleted initially because of this 'PECompact' false positive. After updating the virus definition, Kaspersky allowed these apps to run happily ever after. ;D
Deleted? Gosh, you need to turn down the paranoia level a bit and just block access :)
- carpe noctem

dk70

  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 269
    • View Profile
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #9 on: March 17, 2007, 10:16:33 AM »
In case this false positive does not come from good old file scanner you might want to spend some time setting up Kaspersky. At least initially there can be many popups from extra security features - most I think disabled in "Basic" installation. "Potentially dangerous software" is one, not even enabled in "Advanced" installation or what they call it. Then comes Proactive Defense, Activity Analyzer and Integrity Control. Ive seen some suggesting this is only for advanced users so disable, others say these features is what make Kaspersky better. Blah, blah - if used they have to be set correctly all the way through and warnings (always prompt for action!) must be understood.

brate

  • Participant
  • Joined in 2007
  • *
  • default avatar
  • Posts: 4
    • View Profile
    • Donate to Member
Re: Does the software contain virus PECompact?
« Reply #10 on: March 31, 2007, 07:57:46 AM »
lastest:
After updating my kaspersky today, kaspersky re-scaned the quarantined objects and told me that : the already quarantineed urlsnooper is safe and ask me to restore it:)