Kaspersky Anti-Virus 2010

Reason: when infected objects are detected in an archive, Kaspersky Lab products version 2010/2011/2012 block access to infected objects by changing the security descriptor of the blocked object.

Security descriptor is a special structure which stores information about the object security.  Actions by changing a security descriptor lead to changes of the file attributes as well.