FP or something else

[wildman424]

these plugins for PEID are being detected looks like a general detection

is it a false positive or am I missing something

11:40:00	wildman424	DETECTION	C:\Documents and Settings\wildman424\My Documents\My Downloads\New Folder (2)\PEiD-0.95-20081103\plugins\ImpREC.dll	Malware.Gen	QUARANTINE
11:40:00	wildman424	DETECTION	C:\Documents and Settings\wildman424\My Documents\My Downloads\New Folder (2)\PEiD-0.95-20081103\plugins\ImpREC.dll	Malware.Gen	DENY
11:40:05	wildman424	DETECTION	C:\Documents and Settings\wildman424\My Documents\My Downloads\New Folder (2)\PEiD-0.95-20081103\plugins\ZDRx.dll	Malware.Gen	QUARANTINE

I'm working on a developer mode log for you but here are the files in question

edit: attached dev mode log same two files but found in the recycling bin probaly from the copys I made while preparing that archive

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5596

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

1/25/2011 12:17:36 PM
mbam-log-2011-01-25 (12-17-33).txt

Scan type: Quick scan
Objects scanned: 169032
Time elapsed: 6 minute(s), 53 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\RECYCLER\s-1-5-21-831471125-3920118273-2889780124-1006\Dc4\ImpREC.dll (Malware.Gen) -> No action taken. [459749cc1ae67a869380005a20e037c9]
c:\RECYCLER\s-1-5-21-831471125-3920118273-2889780124-1006\Dc4\ZDRx.dll (Malware.Gen) -> No action taken. [e6f68a8b90707c848390500ab24e50b0]

I think I now know why seems they packed them with UPX and didn't sign them

[nosirrah]

Very atypical files triggering heuristics. I can fix this for you in the next update.

[wildman424]

thank you sir

they packed them with UPX and didn't sign them

sloppy sloppy

[nosirrah]

thank you sir

sloppy sloppy

Actually way stranger than that. Not sloppy just very very strange.

[wildman424]

hmm, I'm still learning about packers

thanks for quick fix