帮看看，红伞扫出来的。自动删除后还会出现。

陈阳

BD挂了！

yoursljx

报了啊KAV 6。0。307
下载时候的主动防御～～

lacmiu

小红伞报

jackeylau

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00053681.




We received the following archive files:



File ID  Filename  Size (Byte) Result
1002082  SACH0ST.rar 654.48 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
1002083  SACH0ST.exe  681 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
SACH0ST.exe  MALWARE

The file 'SACH0ST.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.FKM.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... mp;incidentid=53681

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... ETR0VAB3Y147wGtQW6Z


Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------
哪位大大翻译一下

jackeylau

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00053680.




We received the following archive files:



File ID  Filename  Size (Byte) Result
1002080  eventrep.rar 224.82 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
1002081  eventrep.dll  230.5 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
eventrep.dll  MALWARE

The file 'eventrep.dll' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Crypted.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... mp;incidentid=53680

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... ETR0VAB3Y147wGtQW6Z


Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992

继续求翻译

jackeylau

上次在某位朋友提议下去安全模式用红伞全盘扫描了一遍，什么也没发现。这2天红伞很安静，认为病毒被干掉了，但是今天一启动电脑却发现隔离区隔离了一个文件，仔细一看隔离日期那里是2099-1-1，完全晕掉。朋友那里不容乐观，他装的是卡巴6.0.300套装这2天不停报SACH0ST.exe，提示重启删除，但是重启后还会出，进安全模式开卡巴就死机。为什么我这里307之前什么都没报呢。