Ive just done a scan with trojanhunter and at the end of the scan it says:Possible trojan:c:\WINDOWS\system32\drivers\sys\TAR.EXE.Suspicious upx packed file found in windows system folder.Anybody know if this is a trojan?
Stress Removal
Trojanhunter!
1 min read
Rogue
See post located at http://www.malwareremoval.com/forum/viewtop ... 3582#73582
Upload the file to either jotti or virustotal.
Jotti:-
http://virusscan.jotti.org/
Virustotal:-
http://www.virustotal.com/en/indexf.html
Could be dodgy but being UPX packed could be a false positive.
Being called TAR.EXE is suggesting its to do with tarballs from unix but check the directory and see what other files are in there.
Jotti:-
http://virusscan.jotti.org/
Virustotal:-
http://www.virustotal.com/en/indexf.html
Could be dodgy but being UPX packed could be a false positive.
Being called TAR.EXE is suggesting its to do with tarballs from unix but check the directory and see what other files are in there.
Hello all,
This may be totally off the mark, but if I remember correctly
'way back in the DOS days (anyone remember DOS?) there was a file compression utility that used the suffix ".TAR" to designate the files it had compressed. Unless I'm wrong, the utility itself was called "TAR.EXE" 
Just for grins and giggles, what does the PROPERTIES tab show about this file? Date? Size? Anything else?
Google still has lots of hits on this file as a compression utility, by the way.
S S
This may be totally off the mark, but if I remember correctly
'way back in the DOS days (anyone remember DOS?) there was a file compression utility that used the suffix ".TAR" to designate the files it had compressed. Unless I'm wrong, the utility itself was called "TAR.EXE" Just for grins and giggles, what does the PROPERTIES tab show about this file? Date? Size? Anything else?
Google still has lots of hits on this file as a compression utility, by the way.
S S