Probably I should have included some additional info in my first post.
My virusscanner is Avira Free Antivirus, up to date and one of the better ones, especially among the free versions.
I got the message while installing Slitaz Rolling via VirtualBox. The .iso file was mounted as a virtual CD. After that I repeated the download and scanned the file before doing anything else with it. The result was the same: detected TR/Crypt.ULPM.Gen.
Now to answer the replies so far:
@Trixar_Za: Yes, it could be a false positive, that's always possible. The VBox method I used is one of the ways to expose Windows to this kind of malware.
@Aleksej: I have a lot of confidence in Slitaz Developers! However, that doesn't mean nothing can go wrong. It is always possible that a file is somehow infected, even when one is not working under Windows. Shit happens but I've been around here long enough to know this will never be done by you guys on purpose.
@Bellard: Do you mean to say you found where the detection comes from? That would be great. If you want I can try to download these files and verify that's where the report comes from.
@all: I don't think this is a particularly mean Trojan. First of all it is very old and then it is merely classified as malware. Reason for me to report it is simply that anyone who wants to give Slitaz a try will not be inclined to continue with it after receiving such a message from the virusscanner. That would be a real shame.