Notepad++.exe

[spg SCOTT]

The text editor. The one that is detected, is from the portable version, but I think it would apply to the normal install as well.

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6583

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.19048

5/15/2011 12:20:35 PM

mbam-log-2011-05-15 (12-20-28).txt

Scan type: Quick scan

Objects scanned: 395

Time elapsed: 14 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Users\Scott\Desktop\notepad++portable\App\notepad++\notepad++.exe (Trojan.Agent) -> No action taken. [b403ff1a4ab640c0d628b8d256aabf41]

notepad++.zip

[sUBs]

May I ask where you obtain this copy of Notepad++ from?

I have the same version of Notepad++ on my machine and it bears the same version number 5.9.0.0 but is sized differently. Mine's 1523712 bytes while your's is 812032.

Mine was downloaded from the official website > http://notepad-plus-plus.org/download

[spg SCOTT]

Via PortableApps:

http://portableapps.com/apps/development/notepadpp_portable

[sUBs]

Via PortableApps:

Not an original copy then. I won't debate the need for such but it's a repacked copy of the original.

We'll fix it by the next update.

[spg SCOTT]

I asked and one response was this:

I guess that it has been compressed via the AppCompacter, which AFAIK uses UPX on executables. That may be detected as "unusual runtime packer" (or so)

Since it is to be run from USB drives size can be an issue...

I understand UPX can cause issue with AVs etc...

[spg SCOTT]

Can't edit, but wanted to add.

Thanks