Log in

View Full Version : DTM2 Fixed exe contain virus


fabsar
11-01-2005, 12:26
Hello,

after testing the fixed exe from NCRYSO TrendMicro detected a virus. :mad:

Infected file: C:\WINDOWS\Temp\tmp000098110\ncrdev.exe
Virus name: PE_FINALDO.A

Description:

This destructive, polymorphic, memory resident, and multi-threaded Win32 virus infects EXE files (Windows executables) in the local drives and in Local Area Networks. It has a backdoor component that can upgrade or upload other malware from a remote location using its client program.

does anybody else get this message?


It's the file from the board:
TOCA/DTM Race Driver 2 v1.0 [MULTI] Fixed EXE

fabsar

Eagle
12-01-2005, 03:25
Kaspersky AV says its clean.

Did you update your AV to the latest version / virus database?

GLH
12-01-2005, 06:18
AntiVir Personal Edition (newest) also says it's clean !!!

dede
12-01-2005, 06:51
No the rd2 file is proper, probably you have a virus theyr infected ALL **.exe files on your computer but the origine is not from rd2.exe file.

fabsar
13-01-2005, 08:04
It's not the RD2.exe file itself. You must start the Exe and then click "start".
Then the rd2.exe generates some files in Windows\tmp....
These files are probably infected.

fabsar

dede
15-01-2005, 01:50
probably ??????? nothing infected i use it some time a go. tested with norton 2004 no probs. probably you have a bad computer theyr are infected with an exe destructor or some other ****. :(

fabsar
16-01-2005, 12:20
After some downloading and testing none of the other virus scanners (AVG, Norton, F-Secure, Kaspersky) found something. PC-cillin from TrendMicro will be wrong with the viruswarning.

Thanks for your advice.
Fabsar

Joe Forster/STA
17-01-2005, 06:18
For your information, guys, even the ServerProtect version of TrendMicro antivirus is completely useless, as proven at my work place. :( Uninstall it and install some decent antivirus software. Good luck,

Joe