怎么从扫描结果看出来哪个是启发查出，哪个是高启发查出的毒？

zszzd

怎么从扫描结果看出来哪个是启发查出，哪个是高启发查出的毒怎么从扫描结果看出来哪个是启发查出，哪个是高启发查出的毒

zszzd

找了个毒包，：15个毒，其它是死尸或正常文件：
关了启发和高启发：
Scan performed at: 2007-08-05 22:11:12
Date: 5.8.2007  Time: 22:11:40
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\1-23.rar
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?6.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?7.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?8.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?9.exe - Win32/TrojanDownloader.QQHelper.NCB trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?10.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?11.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?12.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?13.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?14.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?15.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?16.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?17.dll - probably a variant of Win32/Pacex.Gen virus
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?19.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?20.dll - probably a variant of Win32/PSW.Small trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?23.exe - Win32/Hupigon.ETE trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?18.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?21.exe - Win32/PSW.Agent.NFR trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?22.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?1.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?2.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?3.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?4.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?5.exe - is OK
Number of scanned files: 23
Number of threats found: 5
Time of completion: 22:11:40 Total scanning time: 0 sec (00:00:00)

只有五个，
然后只开启发，不开高启：
Scan performed at: 2007-08-05 22:11:40
Date: 5.8.2007  Time: 22:12:08
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\1-23.rar
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?6.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?7.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?8.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?9.exe - Win32/TrojanDownloader.QQHelper.NCB trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?10.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?11.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?12.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?13.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?14.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?15.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?16.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?17.dll - probably a variant of Win32/Pacex.Gen virus
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?19.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?20.dll - probably a variant of Win32/PSW.Small trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?23.exe - Win32/Hupigon.ETE trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?18.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?21.exe - Win32/PSW.Agent.NFR trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?22.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?1.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?2.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?3.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?4.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?5.exe - is OK
Number of scanned files: 23
Number of threats found: 5
Time of completion: 22:12:08 Total scanning time: 0 sec (00:00:00)

还是五个

再开了高启发和启发：
Scan performed at: 2007-08-05 22:12:08
Date: 5.8.2007  Time: 22:12:26
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\1-23.rar
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?6.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?7.exe - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?8.exe - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?9.exe - Win32/TrojanDownloader.QQHelper.NCB trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?10.dll - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?11.exe - a variant of Win32/TrojanDownloader.QQHelper.NCO trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?12.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?13.exe - probably a variant of Win32/PSW.OnLineGames trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?14.exe - probably a variant of Win32/Agent trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?15.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?16.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?17.dll - probably a variant of Win32/Pacex.Gen virus
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?19.dll - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?20.dll - probably a variant of Win32/PSW.Small trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?23.exe - Win32/Hupigon.ETE trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?18.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?21.exe - Win32/PSW.Agent.NFR trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?22.dll - Win32/Pacex.Gen virus
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?1.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?2.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?3.exe - is OK
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?4.exe - probably a variant of Win32/Obfuscated trojan
C:\Documents and Settings\Administrator\桌面\1-23.rar ?RAR ?5.exe - is OK
Number of scanned files: 23
Number of threats found: 15
Time of completion: 22:12:53 Total scanning time: 27 sec (00:00:27)

15个，全了，好像从结果里看不出哪个是启发查出哪个是高启发报的？？

hj5abc

nod32没有高启发和启发之分啊..
advanced heuristic就是指nod32的启发..
a variant , probably a variant , probably unknown XXX 都是是高启发报的..

The EQs

nod32是有启发式和高级启发之分的

wpbisyman

开高级启发的效果就是不一样啊

zszzd

原帖由 hj5abc 于 2007-8-5 22:56 发表
nod32没有高启发和启发之分啊..
advanced heuristic就是指nod32的启发..
a variant , probably a variant , probably unknown XXX 都是是高启发报的..

但是我在第一次启发和高启发都关了的情况下，还报了： probably a variant of Win32/Pacex.Gen virus？？？又有probably，还有variant？？

zszzd

再问一回

blueskyy

同问 啊，
楼主是个心细的人

hj5abc

扫描器的设置问题吧。。关启发后，不会报probably a variant的。。

hj5abc

原帖由 wpbisyman 于 2007-8-6 03:40 发表
开高级启发的效果就是不一样啊

Amon设置档中,"Signature"和"heuristics"只能去掉一个,两个都关闭的话就会提示你: