I think he has packed the exe with nacasi...
This is a known problem of nacasi (or with the scanners), but it´s not a trojan horse!