20070110 mcafee 病毒 上报

http://www.yippeesoft.com/blog/p/1227mcafeeAvertLab.php

有人解释：
经常如此的,早在还是4400引擎时就这样了
上报的自动扫描引擎太"强"

不过,即使它报了..只要是启发式,还是会送到分析员手里
如果是特征码报也一样会送到分析员手里,比如上报误报
你的上报仍然有效
但是如果密码不是infected,就会被过滤

上报系统的扫描引擎记得是MCAFEE内部开发自己测试用的新引擎，比我们用的所有版本都要好。引擎原型测试通过后才放出BETA让我们测试。。。

今天的EMAIL：
A.V.E.R.T. Sample Analysis
Issue Number:2859265
Virus Research Analyst: Patricia Ammirabile
Identified: Unknown

AVERT(tm) Labs, Sao Paulo, SP

Thank you for submitting your suspicious file and additional information.

Synopsis -

I am forwarding your sample to a Senior Virus Research Engineer for further
review.  We will get back to you once the researcher has completed the
evaluation.  

Support -

Virus Research accepts file-samples for analysis and possible inclusion into
AV signature DAT sets. We are also prepared to answer general virus
questions.

All product-related questions and comments can be addressed through
technical support and customer service, including:

* Product installation and update questions
* Product usage questions
* Specific operating system/version questions
* Assistance with detection and cleaning or removal of viruses or trojans

Please use the following links to reach our technical support group for
McAfee products.

Corporate Customers:
<https://mysupport.mcafeesecurity.com/>

Single User/Retail Customers:
<http://www.mcafeehelp.com>

Note -

Due to the prevalence of network gateway AV products it is important that
all submissions be zipped and the zip file password protected (password -
infected). Some products will reject an email that contains a virus that is
not sent in this way. In addition, often we receive a file that appears not
to have been infected, to find later that the file was infected when it left
the sender, and was cleaned somewhere along the line.

Regards,

Patricia Ammirabile
Virus Research Analyst
McAfee AVERT (TM)
A division of McAfee, Inc.

呵呵 不错～～～～～～～

历史博文

标签：,
六月 13, 2007 at 9:59 下午 by yippee 1,005 次
Category: Info
Tags: ,