From Eckzow, one of the Decal Developers:
Firstly I'd like to say that I'm an official Decal developer. I'm here to refute this hoax.
I'd like to point out first that the software that is detecting the trojan is unreliable. I've scanned it on files that I have in quarentine that DO contain viruses and it picks up nothing. I scan it on decal more than once and it finds more than one different trojan. If I scan it with reliable virus scanners (Specifically Norton and McAffe) I get a virus alert on the quarentined files and none of Decal (even in uber-paranoid scan mode).
What I'm willing to bet is at fault is a small script that is contained in the beginning of the Decal installer that deletes/uninstalls old versions of Decal. This could be easily considered a "virus."
What could also be at fault is a component of Decal that end-users never see. Behind the scenes, Decal includes what is called a "VBScript Plugin Surrogate" which is, without getting too technical, a helper service that allows certain plugins to run. If you open up DenAgent and scroll down, you can clearly see this service listed.
I hope this clears things up, and clarifies the fact that Decal does NOT contain a trojan.
Eckzow
Decal Developer
Adding to Eckzow's info, you can find the complete source to Decal at http://decaldev.sourceforge.net and check every part yourself, there is no trojan there. Due to the Open-Source nature of Decal, it is impossible to put a trojan into Decal without a lot of other people who arent directly involved with the Decal Developers noticing
