一个可疑文件的背后

智琛

瓜皮猫 发表于 2011-12-31 19:16
可以找他多交流下，以后都会熟的。

嗯。最近上的少了。
我看知了快要接上了

瓜皮猫

智琛 发表于 2011-12-31 19:17
嗯。最近上的少了。
我看知了快要接上了

恩。
我也要离开了

ADSLgg

红伞miss，to

jefffire

现在不是未知拦截，而是类似于诺顿IPS的木马外联特征拦截。

郑伟用户

jefffire 发表于 2011-12-31 20:56
现在不是未知拦截，而是类似于诺顿IPS的木马外联特征拦截。

如果已经确定是木马特征还需要这步拦截的必要吗，直接杀了不就得了

jefffire

郑伟用户 发表于 2011-12-31 20:59
如果已经确定是木马特征还需要这步拦截的必要吗，直接杀了不就得了

网络特征，是数据包特征。
给你看个这个就懂了

System Infected: ZeroAccess Rootkit Activity
Severity: High
This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.
Description
Your computer is infected - Action is recommended, see response section for further details on this threat.

This IPS signature is designed to detect and block the network communications initiated by Trojan.Zeroaccess to prevent the threat from receiving additional commands and further updates even when antivirus might not be able to detect the infection.

System Infected: Trojan Downloader Activity
Severity: High
This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.
Description
This signature detects attempts to post stolen information from victim's machine to the hacker controlled servers.

lbb9432

BD   clean

郑伟用户

jefffire 发表于 2011-12-31 21:01
网络特征，是数据包特征。
给你看个这个就懂了

估计是我理解错误了，要是这样的话毒霸防黑墙也有这个功能

mafei1

过费尔

Tron

郑伟用户 发表于 2011-12-31 22:19
估计是我理解错误了，要是这样的话毒霸防黑墙也有这个功能

别扯了，防黑墙根本没这个功能，防黑墙能拦截恶意推广金山毒霸吗