本帖最后由 ELOHIM 于 2015-9-18 00:42 编辑
在一个样本分析中,微软提示启用MAPS功能并可以获取更好保护。
link for you: http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Win32%2fUpatre#tab=1
微软企业级杀毒软件默认关闭这个功能,比如SCEP, WIN intune等,但是家庭用户默认使用“基本”MAPS级别。
Join the Microsoft Active Protection Service (MAPS) community
The Microsoft Active Protection Service (MAPS) is an online community that helps you decide how to respond to potential threats from viruses and other malware. MAPS also helps stop the spread of new malware infections.
You can choose to send Microsoft info about any software that Windows detects as a potential threat. This info helps Microsoft create new malware definitions that help better protect your PC. For example, a new definition might indicate where items were detected on your PC and warn other people where to look, even if you've already removed the malware from your PC. If you join the MAPS community, info about any detected threats will be collected and sent to Microsoft automatically.
To join the MAPS community
1.Open Windows Defender by swiping in from the right edge of the screen, and then tapping Search (or if you're using a mouse, pointing to the upper-right corner of the screen, moving the mouse pointer down, and then clicking Search), entering Defender in the search box, tapping or clicking Apps, and then tapping or clicking Windows Defender.
2.Tap or click the Settings tab, and then tap or click MAPS.
3.Choose a level of participation by selecting Basic membership or Advanced membership, and then tap or click Save changes. You might be asked for an admin password or to confirm your choice.
http://windows.microsoft.com/en-us/windows-8/join-maps-community
龙神百科:http://bbs.kafan.cn/thread-1773923-1-1.html
然而,那些国宝级别害怕隐私泄露的朋友请忽略使用此方法,因为微软隐私声明证实:真的会上传很多很多类型的信息出去的。 |