关于mcafee的启发式杀毒

fankj660

今天上报了两个样本，在我的机器上mcafee是没有报毒的，但是在mcafee的回复中却说他们的启发式引擎已经查到毒了这是怎么回事？我的启发式引擎没开？附上mcafee返回的信息:

inconclusive [ svchost.rar ]
Upon analysis the file submitted does not appear to contain one of the 200,000 known threats in the AutoImmune database. The file may contain a new threat, or no code capable of being infected. Your submission is being forwarded to an Avert Labs Researcher for further analysis. You will be contacted by AVERT through e-mail with the results of that analysis.

heuristic detection [ 12.rar ]
The file received may contain a potential virus or trojan threat identified heuristically. This potential threat was identified with our most powerful set of heuristic DAT drivers. Heuristic drivers can cause false-positive identifications, as such, this issue is being escalated to Avert Labs for a thorough review.
In the meantime, it is recommended that you update your DAT and engine files and scan your computer again. You will be contacted through e-mail with the results of our analysis.

tracydk

可能是因为你的咖啡是企业版的，居然企业版的咖啡启发方面没个人版的好的。。
它说报的是应该是个人版的报的启发

hddgmon

不是个人版启发，俺用了很长时间的3in1，很多都是本地不报，上报报的样本～～
估计是mcafee的自动分析程序发现的，但是那种程序又不可能运行在目前的微机上，所以。。。