Jump to content
Sign in to follow this  
dgcombs

Keepass As W32.crypt

Recommended Posts

Hi,

recently updated my keepass to version 1.19b on Windows-7 (64bit). Immunet barked at me and immediately quarantined the file keepass.exe claiming it was identified as W32.Crypt. I have checked the same file with Avast and it doesn't get excited. I also downloaded the 1.18 version of Keepass and it comes away with a clean bill of health.

 

False Positive? Or should someone warn the good folks at Sourceforge/Keepass?

Dan

Share this post


Link to post
Share on other sites
Guest Orlando

Hi,

 

I downloaded the KeePass 1.19b by here and do a scan with the Free version and it isn't detected, have you got the Plus version?

 

Can you post here the link of your download link?

 

Orlando

Share this post


Link to post
Share on other sites

I downloaded the KeePass 1.19b by here and do a scan with the Free version and it isn't detected, have you got the Plus version?

 

Can you post here the link of your download link?

 

Interesting. I downloaded from that same link. I tested using the ZIP file from that link as well. My Immunet is the free version 3.0.1.6112.

Share this post


Link to post
Share on other sites
Guest Orlando

You should clean you History, please use Immunet Protect Fix Tool to fix it or do it manually.

 

Manually:

 

Start CMD as Administrator and type:

 

1) net stop immunetprotect

2) del ...\Immunet\history.db

3) del ...\Immunet\historyex.db

4) del ...\Immunet\cache.db

5) net start immunetprotect

 

Orlando

Share this post


Link to post
Share on other sites

You should clean you History, please use Immunet Protect Fix Tool to fix it or do it manually.

 

Manually:

 

Start CMD as Administrator and type:

 

1) net stop immunetprotect

2) del ...\Immunet\history.db

3) del ...\Immunet\historyex.db

4) del ...\Immunet\cache.db

5) net start immunetprotect

 

This is getting very interesting. I did as you suggested and removed the History information. I then started Immunet and rescanned the downloaded ZIP file. The scanner popped back with a clean bill of health. But the on-access portion popped up and announced (again) W32.Crypt in inside the ZIP file and quarantined the zip file.

 

I think I'll stay at version 1.18 for the time being.

Share this post


Link to post
Share on other sites

These are fixed now and are safe to restore from your quarantine. Keepass (aka PasswordSafe) is awesome by the way. I hate it when we FP on awesome software.

Share this post


Link to post
Share on other sites

These are fixed now and are safe to restore from your quarantine. Keepass (aka PasswordSafe) is awesome by the way. I hate it when we FP on awesome software.

Thanks!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×
×
  • Create New...