'Cannot unpack' - meaning??? - Mischel Internet Security Forum

Jobs | About | Blog | Contact

Download TrojanHunter Now
Free 30-day trial!

Latest TrojanHunter Version:
TrojanHunter 5.0

Order Now
License file delivered within minutes.

Welcome, Guest. Please Login or Register.

Oct 7^th, 2008, 11:51am

   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Guard (Moderators: Helena, Gavin_Coe, Magnus)
   'Cannot unpack' - meaning???

« Previous topic | Next topic »

Pages: 1

Notify of replies

Send Topic

Author

Topic: 'Cannot unpack' - meaning??? (Read 682 times)

xylophone
Newbie

Posts: 19

'Cannot unpack' - meaning???
« on: Sep 3^rd, 2006, 2:14pm »

Quote

Modify

What does this mean? Is it something to worry about? If so, what should I do about it?

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 5661

Re: 'Cannot unpack' - meaning???
« Reply #1 on: Sep 4^th, 2006, 1:58am »

Quote

Modify

Welcome to the forum xylophone Cheesy

Typically, no this is not a problem. It just means that a program has been packed with a packer that TH is not capable of "unpacking". The message during the scan is mostly a "info" type message. If TH scanner cannot unpack, it cannot scan/analyze the contents for malicious items.

Where you should become concerned is if you are getting the message on a file that is loaded in your C:\Windows\System32 folder where normally this type of event should not be found. The action to take if this occurs is to come on the forum and inquire about it. Be sure to include the actual alert message from TH scanner so we can view it.

HTHs Wink

« Last Edit: Sep 4^th, 2006, 1:59am by siliconman01 »

IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!

xylophone
Newbie

Posts: 19

Re: 'Cannot unpack' - meaning???
« Reply #2 on: Sep 4^th, 2006, 2:34am »

Quote

Modify

Many thanks. I shall run another check and make sure about my \System 32 folder

IP Logged

xylophone
Newbie

Posts: 19

Re: 'Cannot unpack' - meaning???
« Reply #3 on: Sep 4^th, 2006, 3:12am »

Quote

Modify

My scan 3 minutes ago produced the following

C:\WINDOWS\SYSTEM32\DLLCACHE\usbuhci.sys (Add to ignore list)
Warning: Unable to unpack UPX-packed file C:\WINDOWS\SYSTEM32\DRIVERS\usbuhci.sys (Add to ignore list)
Warning: Unable to unpack UPX-packed file C:\WINDOWS\SYSTEM32\ReinstallBackups\0003\DriverFiles\i386\usbuhci.sys (Add to ignore list)
Warning: Unable to unpack UPX-packed file C:\WINDOWS\SYSTEM32\ReinstallBackups\0004\DriverFiles\i386\usbuhci.sys (Add to ignore list)
Warning: Unable to unpack UPX-packed file C:\WINDOWS\SYSTEM32\ReinstallBackups\0005\DriverFiles\i386\usbuhci.sys (Add to ignore list)
Warning: Unable to unpack UPX-packed file C:\WINDOWS\SYSTEM32\ReinstallBackups\0007\DriverFiles\i386\usbuhci.sys (Add to ignore list)

Further to your earlier reply, please advise.

I don't use System Restore, BTW

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 5661

Re: 'Cannot unpack' - meaning???
« Reply #4 on: Sep 4^th, 2006, 3:46am »

Quote

Modify

What Windows OS (with Service Pack #) are you using?

What TH version (with Build #) are you using?

I am not experiencing a UPX-packed file warning on usbuhci.sys on my XP-SP2 Home Edition system with TH V4.5, Build 924.

IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!

xylophone
Newbie

Posts: 19

Re: 'Cannot unpack' - meaning???
« Reply #5 on: Sep 4^th, 2006, 4:03am »

Quote

Modify

XP Home SP1

TH 4.5 version 924

I will have to upgrade to SP2 in next weeks, before MS support for it runs out on 10.10

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 5661

Re: 'Cannot unpack' - meaning???
« Reply #6 on: Sep 4^th, 2006, 4:34am »

Quote

Modify

Glad to hear that you are upgrading to SP2 soon. Higher security service pack...for sure. Wink

I recommend that you just add these usbuhci.sys alerts to the IGNORE list for the time being. Then after you upgrade to SP2, remove them from the Ignore list and see if they still get a UPX alert from TH.

IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!

xylophone
Newbie

Posts: 19

Re: 'Cannot unpack' - meaning???
« Reply #7 on: Sep 4^th, 2006, 4:52am »

Quote

Modify

Good. Many thanks for your prompt and courteous advice.

I have been very wary of upgrading to SP2, given the horror stories that abound about that. But it is now the end of the road for SP1.

IP Logged

xylophone
Newbie

Posts: 19

Re: 'Cannot unpack' - meaning???
« Reply #8 on: Sep 4^th, 2006, 5:27am »

Quote

Modify

BTW, where is the Ignore List? Have searched high and low for it. Where do I find it Huh

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 5661

Re: 'Cannot unpack' - meaning???
« Reply #9 on: Sep 4^th, 2006, 5:29am »

Quote

Modify

Upgrading to XP-SP2 normally goes smoothly and without a hitch. It pays to "prepare" for the upgrade. Most problems occur because of third party software incompatibility and hardware drivers being out of date.

0. Be sure you have adequate RAM. Personally I don't feel anything less than 512 mbytes is adequate.

1. Ensure that you are updated with the latest versions of third party software that you have on your system...particularly security type software.

2. Check your system for possible malicious content. Do a remote scan with Kaspersky and Bitdefender and TrendMicro Anti-Spyware. Do this just before you are going to do the upgrade. It takes some time (depending on your Internet connection, etc.) so be prepared for that. The link below shows links to various remote scanners.

http://forum.misec.net/board/FAQ/1141894786

3. Download the Service Pack 2 upgrade in advance and burn it on a CD if you have that capability. It's 266 mbytes.

http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4 F30-8245-9E368D3CDB5A&displaylang=en

4. Backup all critical personal files....just to be safe. It's a good time to clean off all the junk from your system as well.

5. Obtain the latest drivers for specific hardware that you have on your system...such as printers, graphics card, etc., etc. Just because XP-SP2 is the latest and greatest from Microsoft, it does not mean that it provides the latest drivers for hardware that you may have on system...particularly graphics cards and printers. Save these off to a CD so that you will have them for installation AFTER you upgrade...if necessary. Be sure to check the version numbers provided by XP-SP2 with the latest drivers obtained from the manufacturer sites. Upgrade as necessary.

6. When you are ready to start the actual upgrade, be sure to close down all other programs, particularly security type programs. You should disconnect from the Internet PHYSICALLY. Then just follow the "bouncing ball".

HTHs. Wink

IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!

xylophone
Newbie

Posts: 19

Re: 'Cannot unpack' - meaning???
« Reply #10 on: Sep 4^th, 2006, 6:38am »

Quote

Modify

Thanks for the advice about SP2. I have already done my homework and understand what to do (using a CD), so wish me luck.

Can you reply to my previous question - BTW, where is the Ignore List? Have searched high and low for it. Where do I find it?

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 5661

Re: 'Cannot unpack' - meaning???
« Reply #11 on: Sep 4^th, 2006, 7:01am »

Quote

Modify

Oops, sorry, missed the question.

1. Open TH scanner.

2. In the top menu under VIEW, select Advanced.

3. Click on the Options icon in the left menu bar.

The IGNORE LIST is selectable on the bottom of the window. There is a button that says "Ignore List"

And may the Gods be with you on your SP2 upgrade.

« Last Edit: Sep 4^th, 2006, 7:02am by siliconman01 »

IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!