Results 1 to 7 of 7

Thread: [FIXED] Packed.Win32.Krap.ai - C:\i386\vsxml.dll - False Positive

  1. #1
    edrubins Guest

    Default [FIXED] Packed.Win32.Krap.ai - C:\i386\vsxml.dll - False Positive

    I was having a problem with ZASS hanging while scanning. I booted into safe mode with networking and did a scan. The scan completed with nothing found. I then booted normally, updated the signature files and ran another scan which resulted in "Packed.Win32.Krap.ai was found in C:\i386\vsxml.dll"

    The error occured on the first scan after updating the signature files. My understanding is that vsxml.dll is a Truevector file. What are the implications of its being infected and how do I repair it. Will it be necessary to completely uninstall / reinstall ZASS?

    MS XP Pro SP3
    ZASS Version 9.1.008.000
    TrueVector Security Engine 9.1.008.000
    Driver Version 9.1.008.000
    Anti-virus/Anti-Spyware engine version 8.0.2.42 DAT file vesion 1012671904
    AntiSpam version 6.0.0.2683
    Last edited by fax; February 28th, 2010 at 08:40 AM.

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Packed.Win32.Krap.ai was found in C:\i386\vsxml.dll

    Hi!

    sounds like a false positive on an old version of the truevector dll. The actual running dll is in windows/system32/

    See here below for reporting false positives:
    http://forums.zonealarm.com/showthread.php?t=70505

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    edrubins Guest

    Default Re: Packed.Win32.Krap.ai was found in C:\i386\vsxml.dll

    Thanks for the quick reply. I found the actual file in c:\Windows\System32\. Is the version in C:\i386\ possibly left over from a previous version?

    Where do I find the "infected" file now that ZASS has treated it?

    Best, Ed

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Packed.Win32.Krap.ai was found in C:\i386\vsxml.dll

    Quote Originally Posted by edrubins View Post
    Where do I find the "infected" file now that ZASS has treated it? Best, Ed
    The file is isolated in the quarantine (ZA antivirus/antispyware section). See the already mentioned instruction how to proceed further.

    Thanks,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  5. #5
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Packed.Win32.Krap.ai was found in C:\i386\vsxml.dll

    The false positive is fixed now.
    Manual update the antivirus signature and restore the file from the ZA quarantine.

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  6. #6
    edrubins Guest

    Default Re: [FIXED] Packed.Win32.Krap.ai - C:\i386\vsxml.dll - False Positive

    "The false positive is fixed now.
    Manual update the antivirus signature and restore the file from the ZA quarantine.

    Cheers,
    Fax "

    Now I'm really confused. If the correct file is in c:\Windows\Systems32\ why should the file quarantined from c:\i386\ be restored? Also, exactly where is the quarantine?

    Cheers, Ed

  7. #7
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: [FIXED] Packed.Win32.Krap.ai - C:\i386\vsxml.dll - False Positive

    Quote Originally Posted by edrubins View Post
    Now I'm really confused.
    Relax, no stress. It was a false positive and now it is corrected. Now you do what you want with the file. You keep it, you delete, etc. It does not make any difference. Up to you.

    Thanks!
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Packed.Win32.Krap.ag.
    By bcool in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 5
    Last Post: November 29th, 2009, 07:32 PM
  2. virus - packed.win32.krap.d
    By geopris in forum Malware Discussion
    Replies: 1
    Last Post: December 17th, 2008, 10:41 PM
  3. virus - packed.win32.krap.d
    By fax in forum Windows and ZoneAlarm Messages and Alerts
    Replies: 0
    Last Post: December 16th, 2008, 02:49 PM
  4. What is Packed.Win32.Krap.B?
    By rtviii in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 4
    Last Post: October 31st, 2008, 11:58 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •