用小红伞c版扫描硬盘的结果

sandisker

扫描配置如下：
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: repair
Secondary action.................: delete
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, E:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: on
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,
Macro heuristic..................: on
File heuristic...................: high
Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,

扫描结果
Starting master boot sector scan:
Master boot sector HD0
    [INFO]      No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
    [INFO]      No virus was found!
Boot sector 'D:\'
    [INFO]      No virus was found!
Boot sector 'E:\'
    [INFO]      No virus was found!
------------------------------------------------------------------------------------------
  15046 Scanning directories
758146 Files were scanned
     31 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
     58 files were moved to quarantine
      0 files were renamed
      2 Files cannot be scanned
758111 Files not concerned
  10003 Archives were scanned
     14 Warnings
     29 Notes
  56360 Objects were scanned with rootkit scan
      0 Hidden objects were found
其中58个文件被隔离，58从何而来？结果中31个virus+2个可疑+14个warning+2个不能扫描的？



列举几个例子：

E:\Tools\UltraEdit32c_12.20b.rar
    [0] Archive type: RAR
    --> KeyGen.exe
      [DETECTION] Is the TR/Agent.16304 Trojan
    [NOTE]      A backup was created as '49645da0.qua'  ( QUARANTINE )
    [NOTE]      Attempting to perform action using the ARK lib.
    [NOTE]      A backup was created as '49645da1.qua'  ( QUARANTINE )

C:\Program Files\SSREADER36\anno_acc.dll
    [DETECTION] Contains recognition pattern of a probably damaged CC/Agent.HR sample
    [NOTE]      A backup was created as '495e54a9.qua'  ( QUARANTINE )
    [NOTE]      Attempting to perform action using the ARK lib.
    [NOTE]      A backup was created as '4bd9b0ca.qua'  ( QUARANTINE )

C:\Documents and Settings\san\Local Settings\Temporary Internet Files\Content.IE5\MHKNE98P\Index[1].htm
    [DETECTION] Contains recognition pattern of the HTML/Crypted.Gen HTML script virus
    [NOTE]      A backup was created as '49544d82.qua'  ( QUARANTINE )
    [NOTE]      Attempting to perform action using the ARK lib.
    [NOTE]      A backup was created as '4bd84f63.qua'  ( QUARANTINE )

这是不是说明小红伞只能检测出病毒，隔离，不能清除病毒呢？那repair和delete有什么用呢？

秘书

先掌握主界面和设置选项的英文吧

eyesineyes

delete是直接删除，repair现在基本可以无视。现在不像上世纪末病毒不多的年代，每天变种N多，杀软已经没人注重修复功能了。现在病毒都可以干掉杀软，防不住的话，都是白搭。所以杀软现在注重防而不是修复。

幻石

31 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
     58 files were moved to quarantine

确实是只能检测出病毒，隔离，没有清除病毒，但绝对不是楼主所说的“不能清除病毒”

看你英语不错，我就不细说了，你的红伞设置有问题。。

在configuration里把发现发现病毒的处理方式改为直接delete就可以了

幻石

红伞的这个report有问题。。。

[ 本帖最后由 幻石 于 2008-10-11 21:50 编辑 ]

对不起打扰了

改手动扫描的处理方式

solstice1988

楼主应该是设置问题吧！自动处理就改成删除好了。

sandisker

直接删除就怕误删文件，可就惨了。

浮生如燕垒

原帖由 sandisker 于 2008-10-11 23:26 发表
直接删除就怕误删文件，可就惨了。

同时勾选复制进隔离区就不怕了。

[ 本帖最后由 浮生如燕垒 于 2008-10-12 14:26 编辑 ]

刘付

删除前先COPY到隔离区就不怕被误删了，repair确实没什么用