帮我看看是咋回事

ddlxw

应该是隔离了这二十个文件，为啥？

Initiating scan of system files:
NOT signed -> 'C:\WINDOWS\system32\svchost.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a580da2.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\winlogon.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a630da2.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\explorer.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a650db6.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\smss.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a680dae.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\wininet.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a630dab.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\wsock32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a640db9.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\ws2_32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a270dbb.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\services.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a670dae.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\lsass.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a560dc0.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\csrss.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a670dc1.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\drivers\kbdclass.sys'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a590db2.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\spoolsv.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a640dc1.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\alg.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a5c0dbe.qua'  ( QUARANTINE )
Signed -> 'C:\WINDOWS\system32\wuauclt.exe'
NOT signed -> 'C:\WINDOWS\system32\advapi32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a6b0dbc.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\user32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a5a0ddf.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\gdi32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a5e0dd2.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\kernel32.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a670dd5.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\ntdll.DLL'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a590de5.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\ntoskrnl.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a640de7.qua'  ( QUARANTINE )
NOT signed -> 'C:\WINDOWS\system32\ctfmon.exe'
    [DETECTION] Contains HEUR/Modified.SystemFile suspicious code
    [NOTE]      A backup was created as '4a5b0de9.qua'  ( QUARANTINE )
The system files were scanned ('21' files)

cokea

清除扫描设定中的系统文件完整性检测(integrity checking of system file)——推荐使用默认选项，不了解软件的话请勿自行修改而徒增麻烦