This is the story: when I download some game or program that doesn’t have install routines, I tend to make me one with WinRAR, as it can be customised. What I do is make SFX with some options and custom icon, and here lies the problem. If I used only 32x32, 8bit icon, no problem, exe file is created with that icon, and I can extract it. If I use multiple icon source (you know, ICO file with various size icons in there), I get the error.
I recall there was a problem with Total Commander not showing these icons (and files inside archive) because of unpacking header larger than 128k.
Yeah, it’s the archive I’ve created… d:\tmp1\avast_problem\problem.exe
Another archive, no_problem.exe is exactly the same, with same compression method used, only different icon.
If you wish, I can upload it to rapidshare so you can test it yourself. The same archive and icons I sent to avast team. It’s a freeware game - no warez.
Complete scanning result of “problem.exe”, received in VirusTotal at 08.07.2006, 00:00:23 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.06.2006 no virus found
Authentium 4.93.8 08.06.2006 no virus found
Avast 4.7.844.0 08.04.2006 Win32:Trojan-gen. {Other}
AVG 386 08.05.2006 no virus found
BitDefender 7.2 08.06.2006 no virus found
CAT-QuickHeal 8.00 08.04.2006 no virus found
ClamAV devel-20060426 08.06.2006 no virus found
DrWeb 4.33 08.06.2006 no virus found
eTrust-InoculateIT 23.72.88 08.06.2006 no virus found
eTrust-Vet 12.6.2324 08.04.2006 no virus found
Ewido 4.0 08.06.2006 no virus found
Fortinet 2.77.0.0 08.06.2006 suspicious
F-Prot 3.16f 08.06.2006 no virus found
F-Prot4 4.2.1.29 08.06.2006 no virus found
Ikarus 0.2.65.0 08.04.2006 no virus found
Kaspersky 4.0.2.24 08.06.2006 no virus found
McAfee 4822 08.04.2006 no virus found
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1694 08.05.2006 no virus found
Norman 5.90.23 08.04.2006 no virus found
Panda 9.0.0.4 08.06.2006 no virus found
Sophos 4.08.0 08.06.2006 no virus found
Symantec 8.0 08.06.2006 no virus found
TheHacker 5.9.8.186 08.04.2006 no virus found
UNA 1.83 08.04.2006 no virus found
VBA32 3.11.0 08.06.2006 no virus found
VirusBuster 4.3.7:9 08.06.2006 no virus found