Packed.Win32.Krap, ui32.exe

[kek99]

If you use Kaspersky, you've probably seen alot of weird malware names. Today, i'm writing about Packed.Win32.Krap. I have recently seen a message telling me to enable my AntiVirus. Panicking, i opened up Windows Defender and Kaspersky. Kaspersky took a while to open, while the other products like Password Manager loaded in a second. I looked in kaspersky threats and there it is. "It's probably your file has been infected with a virus." Looking down to paths we see this: https://prnt.sc/Ws87sbVl4GF7 (Captured with Lightshot) Please reply.

[BlueLightning]

Hmm, avast clean on this. Idk about this though, so I don't really know what's happening. Maybe the dev could shed some lights better than I do?

[Tim]

ui32.exe is harmless. I cannot make sense of your screenshot, it contains like 20 paths to different ui32.exe locations, most of which would be of cracked versions of Wallpaper Engine. If you pirated Wallpaper Engine in the past, it might be affected. If you never pirated Wallpaper Engine, then it's some sort of false-positive. The real ui32.exe is always located in the wallpaper_engine/bin directory inside of your Steam library folder. By default, it would be this location:

C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin

[kek99]

I have not cracked wallpaper engine, I have bought it on steam and it still does the same thing with ui32.

[Biohazard]

Originally posted by kek99:

I have not cracked wallpaper engine, I have bought it on steam and it still does the same thing with ui32.

Alright, but we don't understand your screenshot. Some of the paths in this screenshot are from cracked versions of Wallpaper Engine. These are presumably not your paths, but we cannot comprehend why the screenshot would be like that, it doesn't seem correct or useful.


We use virustotal.com before we release every single update so that we can be sure that thirdparty anti-virus programs will not deliberately break Wallpaper Engine and scare users unnecessarily. If any anti-virus products are faulty and show false positives, we send complaints to anti-virus companies until they fix their product and only then we release an update.

Kaspersky is not detecting ui32.exe from the current version 2.1.32 on virustotal.com, see here: https://www.virustotal.com/gui/file/d2a301b183e3a6732ae1f596ba484776358f7919f558a705e24153dff0d3d570

So your Kaspersky may be out of date or configured in a way that it will detect more harmless programs than by default. Since the default version of Kaspersky employed by virustotal.com is not detecting anything (no anti-virus product detects anything there as you can see).