Does the software contain virus PECompact?

[brate]

I download the url snooper 2 LATEST RELEASE(v2.18.01 Beta)
from the official site(http://www.donationcoder.com/Software/Mouser/urlsnooper/downloads/URLSnooper.exe)
It was reported by my Kaspersky Anti-virus that this program was infected by a virus called PECompact.

Same problem for the PREVIOUS RELEASE(v2.14.02) from http://www.donationcoder.com/Software/Mouser/urlsnooper/downloads/stable/URLSnooper.exe
also report a "PECompact" virus?

I wanna whether this is true or kaspersky reported wrongly.

[f0dder]

PECompact is an executable compressor that reduces file size of programs. It's not a virus, but kaspersky detects things that aren't viruses... too bad it doesn't make it clear what exactly it's detecting. I wonder if it does this for UPX and other compressors as well?

PECompact is from http://www.bitsum.com , and written by Jeremy Collake who is a member here as well.

[brate]

it was reported as "PECompact(modified)"
don't know why it was marked as "modified".

[mouser]

If you do a search for PECompact you will see it is a very reputable
program "compressor", it has nothing whatsoever to do with a virus --
it's just kaspersky being overly paranoid (or irresponsibly scaring
people if you ask me).  It's definitely not a virus.

I will email kaspersky and see if i cant get them to fix this before
they scare more people.  It's unfortunately not so uncommon for
antivirus programs to false alarm on stuff.

-Jesse (mouser)
(author of URL Snooper)

[nosh]

Maybe it can't unscramble the compressed code thoroughly to see if it's infected or not so it gives you a heads-up to play safe.

[mouser]

Maybe it can't unscramble the compressed code thoroughly to see if it's infected or not so it gives you a heads-up to play safe.

There is some logic to this, but what these antivirus programs should do is say:
"program xxxx could not be analyzed fully and so i can't determine if it's safe"
that would be fair
but instead all antivirus program seem prone to saying "DANGER!! VIRUS!!!"
when they are not sure.

[brate]

If you do a search for PECompact you will see it is a very reputable
program "compressor", it has nothing whatsoever to do with a virus --
it's just kaspersky being overly paranoid (or irresponsibly scaring
people if you ask me).  It's definitely not a virus.

I will email kaspersky and see if i cant get them to fix this before
they scare more people.  It's unfortunately not so uncommon for
antivirus programs to false alarm on stuff.

-Jesse (mouser)
(author of URL Snooper)

I see, thx.

[Wordzilla]

brate:

A current solution for you would be to update Kaspersky virus definition to it latest, or use Kaspersky 6.0 + latest definition.

When I tried Kaspersky 6.0 a few weeks ago, all of my installed DC programs got deleted initially because of this 'PECompact' false positive. After updating the virus definition, Kaspersky allowed these apps to run happily ever after.

[f0dder]

When I tried Kaspersky 6.0 a few weeks ago, all of my installed DC programs got deleted initially because of this 'PECompact' false positive. After updating the virus definition, Kaspersky allowed these apps to run happily ever after.

Deleted? Gosh, you need to turn down the paranoia level a bit and just block access

[dk70]

In case this false positive does not come from good old file scanner you might want to spend some time setting up Kaspersky. At least initially there can be many popups from extra security features - most I think disabled in "Basic" installation. "Potentially dangerous software" is one, not even enabled in "Advanced" installation or what they call it. Then comes Proactive Defense, Activity Analyzer and Integrity Control. Ive seen some suggesting this is only for advanced users so disable, others say these features is what make Kaspersky better. Blah, blah - if used they have to be set correctly all the way through and warnings (always prompt for action!) must be understood.

[brate]

lastest:
After updating my kaspersky today, kaspersky re-scaned the quarantined objects and told me that : the already quarantineed urlsnooper is safe and ask me to restore it:)