this is what I find with avira I'm just scanning and not doing anything with this file or files file: /home/amiga5/.wine-x86_64/drive_c/windows/twain.dll last modified on date: 2010-03-09 time: 14:16:14, size: 1032 bytes ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse TR/Crypt.XPACK.Gen2 ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2 file: /home/amiga5/.wine-x86_64/drive_c/windows/system32/dosx.exe.XXX last modified on date: 2010-03-09 time: 14:16:14, size: 1032 bytes ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse TR/Crypt.XPACK.Gen2 ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2 file: /home/amiga5/.wine-x86_64/drive_c/windows/system32/dsound.vxd.XXX last modified on date: 2010-03-09 time: 14:16:14, size: 1032 bytes ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse TR/Crypt.XPACK.Gen2 ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2 file: /home/amiga5/.wine-x86_64/drive_c/windows/system32/ddhelp.exe.XXX last modified on date: 2010-03-09 time: 14:16:14, size: 1032 bytes ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse TR/Crypt.XPACK.Gen2 ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2 file: /home/amiga5/.wine-x86_64/drive_c/windows/system/ddeml.dll.XXX last modified on date: 2010-03-09 time: 14:16:14, size: 1032 bytes ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse TR/Crypt.XPACK.Gen2 ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2 file: /home/amiga5/.wine-x86_64/drive_c/windows/winhelp.exe.XXX last modified on date: 2010-03-09 time: 14:16:14, size: 1032 bytes ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse TR/Crypt.XPACK.Gen2 ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2 Are these false alerts or are they real? Considering they are all the same trojan I would suspect false alert. I could be wrong...Avira and Bitdefender both found these.... Clamav did not find any. Michael -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines