Hi :>

Today morning, I installed the Windows XP on some machine. After that, I 
downloaded a latest virus databases and I checked the C:\WINDOWS directory 
with a clamscan.exe (windows port). Results are below. 

windows XP
C:\WINDOWS/system32/dllcache/rpcrt4.dll: Exploit.DCOM.Gen FOUND
C:\WINDOWS/system32/dllcache/rpcss.dll: Exploit.DCOM.Gen FOUND
C:\WINDOWS/system32/dllcache/rsvp.exe: Exploit.DCOM.Gen FOUND
C:\WINDOWS/system32/rsvp.exe: Exploit.DCOM.Gen FOUND
C:\WINDOWS/system32/rpcrt4.dll: Exploit.DCOM.Gen FOUND
C:\WINDOWS/system32/rpcss.dll: Exploit.DCOM.Gen FOUND
-- summary --
Known viruses: 20621
Scanned directories: 414
Scanned files: 9015
Infected files: 6

Linux
[EMAIL PROTECTED]:/etc# clamscan -i -r --database=/etc/clamav/ /windisk/windows/
/windisk/windows//system32/dllcache/rpcrt4.dll: Exploit.DCOM.Gen FOUND
/windisk/windows//system32/dllcache/rpcss.dll: Exploit.DCOM.Gen FOUND
/windisk/windows//system32/dllcache/rsvp.exe: Exploit.DCOM.Gen FOUND
/windisk/windows//system32/rsvp.exe: Exploit.DCOM.Gen FOUND
/windisk/windows//system32/rpcrt4.dll: Exploit.DCOM.Gen FOUND
/windisk/windows//system32/rpcss.dll: Exploit.DCOM.Gen FOUND
----------- SCAN SUMMARY -----------
Known viruses: 20610
Scanned directories: 414
Scanned files: 9025
Infected files: 6
---

Is this correct result? It was a fresh installation :-)
I'm not connected directly to the Internet, I'm over the firewall and in my 
LAN this is the only one Windows.

I used a windows port of clamav-devel-20040202 and, under the Linux, 
clamav-devel-20040202 too. 

Best regards
Przemek Holowczyc



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to