Author Topic: Virus in PAR2.EXE?  (Read 4086 times)

Offline nl05369

  • Contributor
  • ***
  • Posts: 9
Virus in PAR2.EXE?
« on: November 29, 2010, 11:33:16 am »
Hello,
last night, my Panda virus scanner suddenly deleted the PAR2.EXE in the MISC directory reporting it as a threat.
I recovered it, and uploaded it to the VirusTotal site (that scans files with 43 different virus scanners). 3 of the 43 scanners returned a possible threat.
Please see report http://www.virustotal.com/file-scan/report.html?id=8be89f0b0b25a690013cb822e3c3b8608ed2b4a382564e74d2c1ffab8c368d66-1290976357

Is the PAR2 file an altered version from the standard one that could cause a huristic scan to question the validity of the file?
Thanks in advance
Alex

Offline Rdl

  • Administrator
  • *****
  • Posts: 4050
Re: Virus in PAR2.EXE?
« Reply #1 on: November 29, 2010, 11:35:40 am »
It's packed with newest UPX version. That's the only possible reason I see. Anyway I'll fix this for the next version.