2

sam.to

Starting the file scan:

Begin scan in 'C:\Documents and Settings\kato9096\桌面\wipaesvc'
C:\Documents and Settings\kato9096\桌面\wipaesvc\2345.exe3
      [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
      [WARNING]   The file was ignored!
C:\Documents and Settings\kato9096\桌面\wipaesvc\keyi_wipaesvc.dll
      [DETECTION] Is the Trojan horse TR/Hipa.1
      [WARNING]   The file was ignored!


End of the scan: Wednesday,28 May 2008  00:44
Used time: 00:07 min

The scan has been done completely.

      1 Scanning directories
      2 Files were scanned
      2 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      2 Warnings
      0 Notes



已解毒: 病毒 Worm.Win32.Otwycal.g        檔案: C:\Documents and Settings\kato9096\桌面\wipaesvc.rar/2345.exe3

上报一个到卡巴


Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-5-28 10:29 编辑 ]

欠妳緈諨

28:05:2008 00:45:07 SEARCHTASK "USER_DEFINED" started...
scan item: D:\病毒测试\解压样本
File scanned: D:\病毒测试\解压样本\2345.exe3 - SIGNATURE FOUND "Win32.Worm.Otwycal.P"
28:05:2008 00:45:09 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 2
Virus found: 1
----------------------------------------------------

无尽藏海

蜘蛛

[扫描路径] E:\VIRUS\wipaesvc.rar
>>E:\VIRUS\wipaesvc.rar\keyi_wipaesvc.dll - 确定
>>>E:\VIRUS\wipaesvc.rar\2345.exe3 已被病毒感染 ：  Win32.HLLW.Autoruner.2042
E:\VIRUS\wipaesvc.rar - 发现压缩文件中有被感染的对象

[ 本帖最后由 无尽藏海 于 2008-5-28 00:49 编辑 ]

一只麦兜

费尔2

woai_jolin

Scan performed at: 2008/5/28 6:33:56
Scanning Log
NOD32 version 3136 (20080527) NT
Command line: G:\v\wipaesvc.rar
C:\Program Files\Eset\nod32.exe - is OK

Date: 28.5.2008  Time: 06:33:58
Anti-Stealth technology is enabled.
Scanned disks, folders and files: G:\v\wipaesvc.rar
G:\v\wipaesvc.rar ?RAR ?keyi_wipaesvc.dll - is OK
G:\v\wipaesvc.rar ?RAR ?2345.exe3 - Win32/AutoRun.NAD virus
G:\v\wipaesvc.rar:Zone.Identifier - is OK
Number of scanned files: 3
Number of threats found: 1
Time of completion: 06:33:59 Total scanning time: 1 sec (00:00:01)

sam.to

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

yunhan123

信息        2008-05-28  10:33:35        您此次查毒清除了1个病毒                       
信息        2008-05-28  10:33:35        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-05-28  10:33:35        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件5个                       
信息        2008-05-28  10:33:35        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-05-28  10:33:35        C:\Documents and Settings\Administrator\桌面\wipaesvc.rar\2345.exe3        Win32.WYCao.af.14064        清除成功

啊弥陀佛

微点砍掉

gaojun7206

wipaesvc.rar
    [0] Archive type: RAR
    --> keyi_wipaesvc.dll
        [DETECTION] Is the Trojan horse TR/Hipa.1
    --> 2345.exe3
        [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
      [NOTE]      The file was moved to '48acce8e.qua'!

电影结束了

TF砍。。。
图没抓到。。。