小红伞V9误报严重

SONGLEI

刚装了小红伞，升级完扫描2分钟内发现20个文件非系统文件，本人用的电脑公司特别版的盗版盘，之前用卡巴和小红伞V8都没有病毒，详细情况如下：
Initiating scan of system files:
NOT signed -> 'C:\WINDOWS\system32\svchost.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\winlogon.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\explorer.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\smss.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\wininet.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\wsock32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\ws2_32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\services.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\lsass.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\csrss.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\drivers\kbdclass.sys'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\spoolsv.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\alg.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
Signed -> 'C:\WINDOWS\system32\wuauclt.exe'
NOT signed -> 'C:\WINDOWS\system32\advapi32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\user32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\gdi32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\kernel32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\ntdll.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\ntoskrnl.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'C:\WINDOWS\system32\ctfmon.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!

heroboy0923

1. 你的扫描设置勾选了“Integrity checking of system files”
2. 你的系统不是原版的

Sebastian

请使用正版系统~

play32

各大杀毒软件支持正版操作系统了哎

yurius

话说这个英文Modified.SystemFile有这么难吗，你自己都知道是非系统文件而且是盗版盘。。。

mj9151

重装系统吧，盗版的系统可不好。楼主还好意思说红伞误报！

[ 本帖最后由 mj9151 于 2009-3-19 16:38 编辑 ]

fengliuyedao

难道卡饭大部分都用的正版系统？？？

olivercmz

昨天升级到V9后杀毒, 依旧没查到......

春天华尔兹

没有楼主说的情况发生

Beloved

原帖由 fengliuyedao 于 2009-3-19 16:39 发表
难道卡饭大部分都用的正版系统？？？

1，楼主的好像没报毒吧，我看都是 Warning，警告啊

2，楼主扫描怎么设置的？


我昨晚 V9 全盘扫描，和 V8 一样，还是 2 个Warning，警告

没报毒啊，