Malware.Packer.Krunchy

[megalos]

Hi,

I did a complete scan and MBAM found that fr-041_debris.exe was infected with Malware.Packer.Krunchy. The file is on my harddisk for several years now, and MBAM never detected it, till now. I got the file from http://www.farb-rausch.com/prod.py?which=2. Is this a false positive or is this really dangerous?

[TeMerc]

Hi.

Please follow the guidelines on the link below for reporting false\positives:

http://www.malwarebytes.org/forums/index.php?showtopic=3228

[nosirrah]

Please zip and attach this file to your next post .

[megalos]

Here is the logfile:

Malwarebytes' Anti-Malware 1.42
Database version: 3366
Windows 6.1.7600
Internet Explorer 8.0.7600.16385

16-12-2009 15:05:20
mbam-log-2009-12-16 (15-05-16).txt

Scan type: Full Scan (C:\|)
Objects scanned: 323481
Time elapsed: 1 hour(s), 19 minute(s), 18 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\L.J.P. Verhees\Documents\fr-041_debris.exe (Malware.Packer.Krunchy) -> No action taken. [D4C61602945D91A3A3C9C431E75DE544]
C:\Users\L.J.P. Verhees\Documents\Newsbin Download\fr-041_debris.rar\fr-041_debris.exe (Malware.Packer.Krunchy) -> No action taken. [D4C61602945D91A3A3C9C431E75DE544]

The sample is in the attachment.

fr_041_debris.zip

[megalos]

Have you already found something? It's been more than a month ago now.

[lordpake]

They likely won't be fixing it.

See the reply to my thread regarding f/p and Krunchy packer here.

[TeMerc]

They likely won't be fixing it.

See the reply to my thread regarding f/p and Krunchy packer here.

And rightfully so.

Closed topic.