UPX-packed executables

[titus483]

Hi,
this is a very annoying one, indeed. I develop a lot of scripts with the script-tool AutoIt (www.autoitscript.com). After testing the script it is then packed by the open source software compression packer UPX into an executable. And that is where Spybot (Tea-Timer) always recognizes this as a Spambot.mib infected file.
03.04.2009 19:16:19 Encountered and terminated Spambot.mib in C:\Users\reinhard\Music\OrangeCD\NTexFiles\CreateTeX.exe!


The problem is discussed on the AutoIt-Forum:
http://www.autoitscript.com/forum/index.php?showtopic=34658

I'm running Windows Vista Home Premium SP1, Spybot 1.6.2.46 on this system.
I'm willing to send additional info, if that's not sufficient.

Greetings
Titus

[Yodama]

hello,

please email one of the files that get detected as Spambot.mib to detections@spybot.info with a reference to this thread.

[titus483]

Hi,
I sent the file detected by spybot on April, 6th (that same day). The latest post still shows "Needs user feedback". What's wrong?. I resent the module today once again.

Greetings
Titus

[Buster]

Hello Titus,

sorry for taking so long. I've taken care of this false positive and a corrected detection file will be released on Wednesday.

best,
buster!