Announcing McAfee 5700 Engine Release Candidate

驭龙

不容易啊，5700的RC版，如期而至，不容易呢，因为以前已经习惯McAfee的跳票了，这次居然没有跳票，有进步

5700 Engine Release Candidate is now available from: McAfee Anti-Malware Engine 5700 | McAfee Release Candidate Program
The 5700 Engine will succeed the current 5600 Anti-Malware Engine and includes the following improvements:
Detection Enhancements
•Enhancements to Java class format scanning to improve exploit detection capabilities
•Live memory scanning on Windows for detecting and removing malicious processes, threads and files
•Enhanced generic unpacking to detect more threats
•Native unpacking for newer versions of ASPack, Autoit and MSI
Performance Enhancements
•General performance optimizations, including initialization and scanning
•Improvement in extra.dat load times
Platform Enhancements
•New supported platforms: AIX 7.1, Linux 3.12 Kernel, FreeBSD 9.x, Solaris 11 on Intel
•End of Life platforms: Win2000, FreeBSD 6.x, Mac on PowerPC, HP-UX on Itanium
System Requirements Disk space and memory:  
•At least 512 MB of free hard disk space
•At least an additional 512 MB of free hard disk space reserved for temporary files
•At least 512 MB of RAM for scanning operations (1024 MB recommended minimum)
•At least 1024 MB of RAM for updating operations
Min OS Requirements
•WinXP Sp3 32bit or WinXP Sp2 64bit (Win XP RTM /SP1 (32 & 64Bit) and Win XP SP2 (32-Bit) are unsupported)
•Win2003 SP2 (Win 2003 RTM and Win2003 SP1 are unsupported)
•Win Vista/7/8/2012 RTM onwards are supported.
IMPORTANT NOTE: VSE 8.7i endpoints must be on VSE 8.7i Patch 5 + Hotfix 982564 to install the Anti-Malware Engine 5700. For details, see KB82746
Release schedule for the 5700 Engine is currently as follows:
•Beta on 6th May 2014
•Release Candidate (RC) on 26th Aug 2014
•RTW (Elective Download) end of Sept 2014
•RTW (Auto Update) in Jan 2015
•5600 Engine End Of Life (EOL) 31st Mar 2015
The Command Line Scanner 6.05 Beta is also available from: http://www.mcafee.com/in/beta/pu ... malware-engine.aspx
PS: Attached is the 5700SDAT and 5600 Force downgrade SDAT packages (might report in some cases that the latest Engine is already installed on 64bit systems but will eventually update it)

引擎包有一点大，无法上传附近，我就不发了

白露为霜

感谢，赶快把fuzhk叫来
@fuzhk

zixiang5288

还是的去官网，太大了

1007

intel做的好事。呵呵。

hagcse

这个会自动推送的吧? 还是必须手动更新？

462588842

hagcse 发表于 2014-8-28 22:08
这个会自动推送的吧? 还是必须手动更新？

会推送，不过好像是正式才行

xtmatao

静等正式版本出来后的自动推送，上官网净是E文，伤不起啊

eesly

LZ，给大家发一个上来吧，官网要注册，很麻烦， 感谢！

驭龙

eesly 发表于 2014-8-29 12:42
LZ，给大家发一个上来吧，官网要注册，很麻烦， 感谢！

安装包是7mb不上传网盘的话，很麻烦，上传网盘的话很快就被删掉，还是等正式版吧

独孤无语

驭龙 发表于 2014-8-29 12:44
安装包是7mb不上传网盘的话，很麻烦，上传网盘的话很快就被删掉，还是等正式版吧

5700正式版后，17.6才会正式吧。。。这是唯一的希望了，昨天迈克菲安全中心小小的升了一个版本，从958升到988.。。但还是16.8
=====================
功能类1：增强对Java类的扫描，用以提高对利用漏洞的检测的能力（加强对Java的漏洞防御能力）；
功能类2：在windows系统上执行实时内存扫描，检测并移除威胁进程及文件；
功能类3：增强基因启发的拆解包能力（脱壳？）检测更多的威胁；
功能类4：提供对新版本的ASPack，Autoit 和MSI 的本地拆解包功能（增加能脱壳的种类？）；
性能类1：缩减extra.dat的载入时间；
性能类2：常规性能优化，包括引擎初始化和扫描；
其它无关紧要。。。以上才是重点。。。毕。。