红伞报毒！WIN7系统文件

l316372145

今天装了WIN7玩下子，装好红伞后扫描了下，报了20多个毒，全是系统文件夹下的，这是不是误报啊？
用的是网上比较流传的7016汉化版的！

l316372145

大家帮忙探讨下子哦，谢谢了

linjw

截图上来看看吧

l316372145

原帖由 linjw 于 2009-4-15 21:04 发表
截图上来看看吧

我直接给忽略了，现在好像扫不到了啊！
日志里面好像也看不见哩！

l316372145

原帖由 linjw 于 2009-4-15 21:04 发表
截图上来看看吧

Initiating scan of system files:
NOT signed -> 'D:\Windows\system32\svchost.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\winlogon.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\explorer.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\smss.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\wininet.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\wsock32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\ws2_32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\services.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\lsass.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\csrss.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\drivers\kbdclass.sys'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\spoolsv.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\alg.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\wuauclt.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\advapi32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\user32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\gdi32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\kernel32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\ntdll.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\ntoskrnl.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
NOT signed -> 'D:\Windows\system32\ctfmon.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [WARNING]   The file was ignored!
The system files were scanned ('21' files)

linjw

把下图红框中的选项去掉
那个是校验系统文件的  如果是改版系统  有可能误报

fzz8848

英文版估计不会报

小冲

破解汉化之类的我觉得都会报……

mom0411

你的７也报２０，呵呵～　　

我这ＳＰ３我只减了一下肥，小伞也报警，也是２０个，呵呵　　不过我这不是毒

l316372145

原帖由 linjw 于 2009-4-15 21:41 发表
把下图红框中的选项去掉
那个是校验系统文件的  如果是改版系统  有可能误报

恩，已经去掉了！
没报了，呵呵！
谢谢咯！