DTM2 Fixed exe contain virus

[fabsar]

Hello,

after testing the fixed exe from NCRYSO TrendMicro detected a virus.

Infected file: C:\WINDOWS\Temp\tmp000098110\ncrdev.exe
Virus name: PE_FINALDO.A

Description:

This destructive, polymorphic, memory resident, and multi-threaded Win32 virus infects EXE files (Windows executables) in the local drives and in Local Area Networks. It has a backdoor component that can upgrade or upload other malware from a remote location using its client program.

does anybody else get this message?


It's the file from the board:
TOCA/DTM Race Driver 2 v1.0 [MULTI] Fixed EXE

fabsar

[Eagle]

Kaspersky AV says its clean.

Did you update your AV to the latest version / virus database?

[GLH]

AntiVir Personal Edition (newest) also says it's clean !!!

[dede]

No the rd2 file is proper, probably you have a virus theyr infected ALL **.exe files on your computer but the origine is not from rd2.exe file.

[fabsar]

It's not the RD2.exe file itself. You must start the Exe and then click "start".
Then the rd2.exe generates some files in Windows\tmp....
These files are probably infected.

fabsar

[dede]

probably ??????? nothing infected i use it some time a go. tested with norton 2004 no probs. probably you have a bad computer theyr are infected with an exe destructor or some other ****.

[fabsar]

After some downloading and testing none of the other virus scanners (AVG, Norton, F-Secure, Kaspersky) found something. PC-cillin from TrendMicro will be wrong with the viruswarning.

Thanks for your advice.
Fabsar

[Joe Forster/STA]

For your information, guys, even the ServerProtect version of TrendMicro antivirus is completely useless, as proven at my work place. Uninstall it and install some decent antivirus software. Good luck,

Joe