v8的引擎“个人”估计明年会有大变更

mofunzone

继续和那个引擎研发人员扯了几句，他说了这么一句话
I said it has an emulator, i didn't say we use it for generic unpacking or heuristics. Those are completely separate things which influence the design of an emulation, and both are included in our future plans.
Marcus Matten
Engine Core Research and Development
Avira GmbH

我是说是有虚拟机，但是我没说我们用来拖壳或启发（那做什么的-_-||）。那些是会影响虚拟机设计的完全没有关系的东西（鄙视他╭∩╮（︶︿︶）╭∩╮），但是那些都在我们未来的计划当中（就这句话还有点用，不过未来是多久？10年，20年？）
期待明年公测结束，看到时候AVE2引擎如何。。

mofunzone

Also with those heavily emulating AVs, you should keep in mind that some of them actually pose a risk on Vista, since Vista has a 10 second time out for file system drivers. Anything that takes longer to emulate will simply be let through and you may or may not receive the warning after the file has already been executed. You can try it with the AVs you mentioned yourself by executing some heavily packed/obscured malware (but don't say i didn't warn you).

In addition, our products provide the same detection on all architectures, x86, sparc, ARM, Power PC, S390. This is a challenge for making emulation really perfomant while keeping it portable. Most AVs that do heavy emulation-based detection only support x86 platforms with it, and fail miserably regarding detection on alternate architectures. For us that is not an option.

Marcus Matten
Engine Core Research and Development
Avira GmbH

不知道nod32，bd和kav有这毛病不。。

solcroft

你不顺便问一问，这个不用来脱壳不用来启发的虚拟机有什么用处

hahacomcn

模拟一下，，看病毒能否在里面跑跑。
看看跑得欢不，，看虚拟机是不是很适合。