Results 1 to 4 of 4

Thread: Packed.Win32.Krap.w - False Positive?

Hybrid View

  1. #1
    garywa Guest

    Default Packed.Win32.Krap.w - False Positive?

    Hey GeorgeV & fax - I need a little help and guidance.

    I just tried to download LastPass Password Manager (the WinXP version) directly from the company's website, lastpass dot com. When I did, ZASS gave an alarm that the file contained the virus Packed.Win32.Krap.w. I think it is a false positive. Clicking on 'More Info' brought up a ZA web page that had no information available. I selected 'Ignore Always' and finished the download, but have not executed the installation file until I can verify if the detection is real or false.

    I downloaded the same file from my in-laws desktop which is wired to the router and runs another popular anti-virus program. No virus was detected when I downloaded it there.

    I went to upload it to virustotal dot com per the false positive reporting instructions, but either there is a problem with the virustotal website or it is just overloaded. Most times the web page won't load (Internet Explorer cannot display the webpage). A few times it did load, but I could never get the file to finish uploading. I again ended up with 'Internet Explorer cannot display the webpage.' I checked my HOSTS file and virustotal is NOT listed, so it is not being blocked there.

    I am using my wireless laptop - its config is in my signature. Below is my current ZASS info.

    ZoneAlarm Security Suite version:9.1.008.000
    TrueVector version:9.1.008.000
    Driver version:9.1.008.000
    Anti-virus engine version:8.0.2.42
    Anti-virus signature DAT file version:1014002496
    AntiSpam version:6.0.0.2383

    Can anyone else verify if they can get to the virustotal dot com website and does it appear to be acting normally?

    Is anyone willing to try and download the LastPass program to see if you also get the virus detected?

    I don't want to send this file to Kaspersky via email until I can verify it first at virustotal.

  2. #2
    garywa Guest

    Default Re: Packed.Win32.Krap.w - False Positive?

    The virustotal website finally started working again and I was able to upload the file. No viruses were found:

    File lastpass.exe received on 2010.03.17 01:07:41 (UTC)
    Current status: finished

    Result: 0/42 (0%)

    I'm going to zip it and send it to Kaspersky.

  3. #3
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Packed.Win32.Krap.w - False Positive?

    Yes, sounds like a false positive. You will hear from kaspersky soon.

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  4. #4
    garywa Guest

    Default Re: Packed.Win32.Krap.w - False Positive?

    Kaspersky replied overnight:

    "Sorry, it was a false detection. It will be fixed in the next update.
    Thank you for your help."

    After letting ZA update the DAT files this morning, I tried downloading the file again but got the same false detection.

    It will probably take a while for the 'fix' to trickle down to all the update servers. I'll just keep checking so I can remove it from the Exceptions list. I don't want to run too long with ZA set to 'Ignore.'

    Have a great day

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [FIXED] Packed.Win32.Krap.ai - C:\i386\vsxml.dll - False Positive
    By edrubins in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 6
    Last Post: February 28th, 2010, 10:14 PM
  2. Packed.Win32.Krap.ag.
    By bcool in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 5
    Last Post: November 29th, 2009, 07:32 PM
  3. False Positive of Packed.Win32.black.d
    By HumbleSeeker in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 5
    Last Post: August 22nd, 2009, 10:40 PM
  4. Replies: 2
    Last Post: March 17th, 2009, 07:31 PM
  5. What is Packed.Win32.Krap.B?
    By rtviii in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 4
    Last Post: October 31st, 2008, 11:58 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •