Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Trojanhunter!

This is the place for general discussions - we are a family site - no bad language, no flames.
A Moderators word is final.

Trojanhunter!

Unread postby pac73 » May 21st, 2006, 9:12 pm

Ive just done a scan with trojanhunter and at the end of the scan it says:Possible trojan:c:\WINDOWS\system32\drivers\sys\TAR.EXE.Suspicious upx packed file found in windows system folder.Anybody know if this is a trojan?
pac73
Regular Member
 
Posts: 52
Joined: February 10th, 2006, 6:02 pm
Location: st helens,merseyside
Advertisement
Register to Remove

Unread postby Rogue » May 21st, 2006, 9:20 pm

User avatar
Rogue
MRU Teacher Emeritus
 
Posts: 4782
Joined: November 3rd, 2005, 3:21 pm
Location: Salt Lake City, Utah

Unread postby richieb001 » May 25th, 2006, 5:03 am

Upload the file to either jotti or virustotal.

Jotti:-
http://virusscan.jotti.org/

Virustotal:-
http://www.virustotal.com/en/indexf.html

Could be dodgy but being UPX packed could be a false positive.
Being called TAR.EXE is suggesting its to do with tarballs from unix but check the directory and see what other files are in there.
richieb001
Regular Member
 
Posts: 70
Joined: February 16th, 2006, 5:47 am

Unread postby Sailbad the Sinner » May 26th, 2006, 9:51 am

Hello all,

This may be totally off the mark, but if I remember correctly :? 'way back in the DOS days (anyone remember DOS?) there was a file compression utility that used the suffix ".TAR" to designate the files it had compressed. Unless I'm wrong, the utility itself was called "TAR.EXE" :)

Just for grins and giggles, what does the PROPERTIES tab show about this file? Date? Size? Anything else?

Google still has lots of hits on this file as a compression utility, by the way.

S S
Sailbad the Sinner
Regular Member
 
Posts: 56
Joined: May 18th, 2006, 7:08 pm
Location: Florida
Advertisement
Register to Remove


Return to General Discussions



Who is online

Users browsing this forum: No registered users and 46 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware