金山清理专家报的三个驱动

moonsilver

金山清理专家报的三个驱动

FBAV

MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\56666666666666666\cnprov.sys]
                    …………发现Spy！报告:[2]
文件信息:  大小:192000  MD5:a4d30d70b20621e885d9f2b3bff6a207


文件数:3   病毒数:1  比重:0.3333333333333
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

无尽藏海

Begin scan in 'D:\Downloads\样本\桌面(2).rar'
D:\Downloads\样本\
  桌面(2).rar
    [0] Archive type: RAR
    --> cnprov.sys
        [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
        [WARNING]   Infected files in archives cannot be repaired!
    --> idnaux.sys
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.Z.192
        [WARNING]   Infected files in archives cannot be repaired!
    --> txmlhrbhw7.sys
        [DETECTION] Is the Trojan horse TR/Rootkit.Gen
        [WARNING]   Infected files in archives cannot be repaired!

gogo8989

FS报

a750828

McAfee adware-BDsearch.sys

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\����.rar'
C:\Users\morgan\Documents\
  ����.rar
    [0] Archive type: RAR
    --> cnprov.sys
        [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
        [WARNING]   Infected files in archives cannot be repaired!
    --> idnaux.sys
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.Z.192
        [WARNING]   Infected files in archives cannot be repaired!
    --> txmlhrbhw7.sys
        [DETECTION] Is the Trojan horse TR/Rootkit.Gen
        [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!


End of the scan: 2007年11月30日  23:44
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
      4 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      3 Warnings
      0 Notes

aerbeisi

检测到：木马程序 Trojan-Downloader.Win32.Agent.fii        文件　: F:\du\桌面.rar/txmlhrbhw7.sys

BING126

扫描开始时间: 2007-12-1 16:02:07
扫描日志
NOD32 版本 2696 (20071130) NT
命令行: C:\Documents and Settings\Administrator\桌面\桌面.rar

日期: 2007年12月1日  时间: 16:02:11
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\Administrator\桌面\桌面.rar
C:\Documents and Settings\Administrator\桌面\桌面.rar ?RAR ?cnprov.sys<病毒 - Win32/Adware.CDN 应用程序>
C:\Documents and Settings\Administrator\桌面\桌面.rar ?RAR ?idnaux.sys<病毒 - Win32/Adware.CDN 应用程序>
C:\Documents and Settings\Administrator\桌面\桌面.rar ?RAR ?txmlhrbhw7.sys<病毒 - Win32/Rootkit.Agent.NCK 木马 变种>
已扫描文件数量: 3
已发现病毒数量: 3
完成时间: 16:02:12 总共扫描时间: 1 秒 (00:00:01)

flykiss

DR.WEB 4.44
  C:\Documents and Settings\Administrator\桌面\桌面.rar\cnprov.sys - is an AdWare program Adware.Cdn
C:\Documents and Settings\Administrator\桌面\桌面.rar\idnaux.sys - is an AdWare program Adware.Cdn

Archive contains 2 infected items

吃青草的狼

瑞星PASS ，一个都没拦下来