红伞误报一键还原

显示全部楼层 · 发表于 2007-7-8 19:04:42

今天用红伞扫描了一下系统文件，报了一键还原，下面是扫描报告：

Begin scan in 'C:\'
C:\pagefile.sys
   [WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\maliqf.sys
   [DETECTION] Is the Trojan horse TR/Agent.41472
   [INFO]    The file was moved to '46fcc11f.qua'!
Begin scan in 'D:\'
Begin scan in 'E:\'
E:\一键还原精灵\tools\NT启动菜单.exe
  [0] Archive type: RAR SFX (self extracting)
  --> boothide.bin
   [DETECTION] Contains signature of the rootkit RKIT/Agent.A0
   [WARNING] The file was ignored!
Begin scan in 'F:\'
Search path F:\ could not be opened!
设备未就绪。

End of the scan: 2007年7月8日  18:54
Used time: 08:05 min
The scan has been done completely.
1586 Scanning directories
  27667 Files were scanned
   2 viruses and/or unwanted programs were found
   0 classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   1 Files cannot be scanned
  27665 Files not concerned
345 Archives were scanned
   2 Warnings
   0 Notes
   0 Hidden objects were found

感觉红伞的扫描速度挺快的，我机器上安装文件不多，一看扫描只用了八分钟，效率确实不错。
在扫描速度上，效率和费尔，nod32有的一拼。[:27:]

显示全部楼层 · 发表于 2007-7-8 19:20:09

上报看看

显示全部楼层 · 发表于 2007-7-8 19:44:08

报这个正常啊``````你还是上报看看啊```

显示全部楼层 · 发表于 2007-7-8 20:47:42

一键还原和一键Ghost都报的，添加到排除区域就省事了。

显示全部楼层 · 发表于 2007-7-8 20:50:27

估计带着广告

显示全部楼层 · 发表于 2007-7-8 22:10:20

老生常谈了

显示全部楼层 · 发表于 2007-7-8 22:57:27

没事没事，呵呵，一点小误杀死不人

显示全部楼层 · 发表于 2007-7-8 23:04:57

这个历史悠久了~

显示全部楼层 · 发表于 2007-7-9 07:06:12

很早就报了，自己排除一下吧，然后再上报

显示全部楼层 · 发表于 2007-7-9 20:40:06

我把一键还原删了

主要还是已经有ghost了

[讨论] 红伞误报一键还原