15x

kuroandsan

1518589226 发表于 2022-4-9 09:05
这玩意杀我几个注册机猛的一P，比wd都猛，，

我这wegame都被dg拦住了，虽然好像不影响运行

1518589226

kuroandsan 发表于 2022-4-9 09:05
刚刚双击了一下，大概封锁了五六个，然后一个入库杀（（（

感觉最近这红伞引擎不对劲啊

本来kaspersky搞的我不想用了 ，，，看fs换了红伞引擎就配合wfc一起玩玩，，这表现着实差强人意，，如果说病毒库慢吧，，可是这都一晚上了，，，

1518589226

kuroandsan 发表于 2022-4-9 09:05
刚刚双击了一下，大概封锁了五六个，然后一个入库杀（（（

感觉最近这红伞引擎不对劲啊

用了几天，，还发现没有本地信誉库，，，每次打开 exec file都， ，，，唉，，一言难尽

kuroandsan

1518589226 发表于 2022-4-9 09:19
用了几天，，还发现没有本地信誉库，，，每次打开 exec file都， ，，，唉，，一言难尽

应该也就第一次打开缓慢，可能在查云信誉

PS：我最后换回了卡巴（不是

1518589226

kuroandsan 发表于 2022-4-9 09:21
应该也就第一次打开缓慢，可能在查云信誉

PS：我最后换回了卡巴（不是

是啊 ，，但是你不能每次重启 都这样啊 ，，，

lvzhiwei

江民2X

lvzhiwei

NIS miss 1X

东南大学

@1518589226 @Anqring @沙丁鱼VX @kuroandsan
就本帖样本来说，看起来是启发等级的差异[我测的小红伞用的启发等级是3，F-Secure应该是用的默认值2]，跟APC无关

1. # HeurLevel <0-x>
   
2. #
   
3. # Sets the heuristic level for the engine. The existing levels are:
   
4. # 0 - disable heuristic detection
   
5. # 1 - lazy heuristic detection (this is the lowest possible mode. Detection
   
6. #     is not very good, but the false positives number will be low)
   
7. # 2 - normal heuristic detection (this is the 'normal' heuristic detection)
   
8. # 3 - high heuristic detection (this is the highest possible mode, but the false
   
9. #     positives number will be high)
   
10. #
    
11. # Available values: 0, 1, 2 or 3
    
12. #
    
13. # Default value: 2

复制代码

顺便提一下，APC检测和上传也有等级差别，F-Secure应该是用的默认值。

1. # APCCheckRiskRatingLevel <value>
   
2. #
   
3. # This option sets a minimum threshold for hash requests sent to the Avira Protection Cloud regarding the risk rating of the file.
   
4. # The risk rating is based on a frequently updated mathematical model to evaluate the risks posed by a certain file.
   
5. # A threshold of 0 hash requests to be sent even if they have a very low risk rating, while a value of 7 checks only the files with the highest assumed risk.
   
6. #
   
7. # Level 0 = Very Low Risk
   
8. # Level 7 = Very High Risk
   
9. #
   
10. # Available values: 0 - 7
    
11. # Default value: 4
    
12. 
    
13. # APCUploadRiskRatingLevel <value>
    
14. #
    
15. # This option sets a minimum threshold for uploads into the Avira Protection Cloud regarding the risk rating of the file.
    
16. # The risk rating is based on a frequently updated mathematical model to evaluate the risks posed by a certain file.
    
17. # A threshold of 0 uploads files even if they have a very low risk rating, while a value of 7 uploads only the files with the highest assumed risk.
    
18. #
    
19. # Available values: 0 - 7
    
20. # Default value: 4
    
21. #
    
22. # Note:
    
23. #   - If APCCheckRiskRatingLevel is greater than APCUploadRiskRatingLevel, then the file will be uploaded only if
    
24. #     the malware probability is greater than APCCheckRiskRatingLevel.

复制代码

ytysh

Ahnlab V3 Lite Miss 13x

2485957129

火绒 kill 14   miss 1