惡意軟體-7Zip_9.20

fireold

[mw_shl_code=css,true]2015/3/21 上午 11:06 [System Scanner] 發現惡意程式碼
      檔案 'C:\Users\vpn\Downloads\7Zip_9.20.exe'
      包含病毒或有害的程式 'PUA/InstallCore.Gen7' [riskware]
      已採取動作：
      檔案會移動至 '503e4d39.qua' 名稱底下的隔離區目錄!

2015/3/21 上午 11:03 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vpn\Downloads\7Zip_9.20.exe 中
      偵測到病毒或有害的程式 'PUA/InstallCore.Gen7 [riskware]'
      執行的動作：拒絕存取
[/mw_shl_code]

浅暮、浅离

过卡巴，上报！！！

Hello,

This message has been generated by an automatic message response system. The message contains details about verdicts that have been returned by Anti-Virus in response to the files (if any are included in the message) with the latest updates installed.   Requests from licensed users, which have been sent from the Dashboard (https://my.kaspersky.com/en/support/viruslab) or CompanyAccount (https://companyaccount.kaspersky.com) will also receive a response from a virus analyst.

7Zip_9.20.exe

No malicious code was found in this file.

Best Regards, Kaspersky Lab

"39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700  http://www.kaspersky.com http://www.viruslist.com"

开开心心卖手机

蛋挞

gaojun7206

恶意程序“PUA/InstallCore.Gen7 [riskware]

浅暮、浅离

Hello,

This message has been generated by an automatic message response system. The message contains details about verdicts that have been returned by Anti-Virus in response to the files (if any are included in the message) with the latest updates installed.   Requests from licensed users, which have been sent from the Dashboard (https://my.kaspersky.com/en/support/viruslab) or CompanyAccount (https://companyaccount.kaspersky.com) will also receive a response from a virus analyst.

7Zip_9.20.exe

No malicious code was found in this file.

Best Regards, Kaspersky Lab

"39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700  http://www.kaspersky.com http://www.viruslist.com"

pal家族

阿童木来了 发表于 2015-3-21 11:14
过卡巴，上报！！！

这个上报很多次了。不知道这次会不会处理？

浅暮、浅离

pal家族 发表于 2015-3-21 11:20
这个上报很多次了。不知道这次会不会处理？

看5楼！！！

pal家族

阿童木来了 发表于 2015-3-21 11:22
看5楼！！！

哦，看来这类文件已经被人工拉白了。

真小读者

微点扫描miss
手抖点成了“以管理员身份运行”，幸好有UAC。。。。

aplk1002

EES
[mw_shl_code=css,true]时间;扫描程序;对象类型;对象;威胁;操作;用户;信息
2015/3/21 11:56:34;文件系统实时防护;文件;C:\Users\Administrator\Desktop\7Zip_9.20.exe;Win32/InstallCore.BY 潜在的不受欢迎应用程序 的变种;通过删除清除 - 已隔离;KONOHA-SAKUYA\Administrator;尝试通过应用程序访问文件时发生事件: C:\Windows\explorer.exe.
[/mw_shl_code]