This is same thing like with Setool2lite and here you have explanation for that behaviour - Win32/Packed.Themida - Wilders Security Forums