认识网页木马，认识网页防护( 附 avast，红伞，AVG 测试报告 )

kaba2

这个贴子还有人顶啊，呵呵，我来终结这个贴子…

小虫a

回复 221# kaba2


    请问你是终结者吗？还是.....?

kaba2

回复  kaba2
    请问你是终结者吗？还是.....?
小虫a 发表于 2010-1-17 11:24

       要终结，很容易啊，我推荐 互联钢钉，目前防挂马 99.99999% 呀！喽，估计要锁贴了

智造中国

借鉴下楼主的测试结果。

小虫a

回复 212# snic


    1. Correct detection

In case the file is detected correctly, it will not be removed from the AVG detection. If you believe that the file should not be detected by AVG, please contact our Technical Support.

If you decide to keep the file and use it with the risk of possible payload it may carry, you can restore it from the AVG Virus Vault, and manually exclude it from the AVG detection:

If the file is detected as a Potentially Unwanted Program
Please open AVG - menu "Tools" - "Advanced settings" - "PUP Exceptions".
Click "Add exception" and browse to the file.
If the file is detected as a virus
Please open AVG - menu "Tools" - "Advanced settings" - "Resident Shield" - "Exceptions".
Enable the option "Use excludes in Resident Shield" and "Add path" to the folder which contains the file.

Please note that the file will be still detected by AVG test. However, you can disable automatic healing in AVG - "Computer scanner" - double-click on scheduled scan - "How to scan" - disable the option "Automatically heal/remove infections".


2. False detection

If the analysis shows that the detection of the file was incorrect, the next Definitions update will contain fix of this detection. Please update your AVG and if a new Definitions update was downloaded, please check whether the file is still detected. There are again two possible scenarios:

The file was removed from detection within the downloaded Definitions update

This update is usually released at least once a day, but it might not be possible to remove all false detections within these updates.
The file was not removed yet within the latest Definitions update
Some specific viruses require more complicated detection, and the new Definitions file for this type infections is released less frequently.
The detection will be removed from AVG Definitions within one of the future updates (in a matter of days).


3. Sent for deep manual analysis

In case it is needed to analyze the file manually. There's a possibility that the automatic analysis is not evident. In such case the file is re-send to our virus lab for deep manual analysis. You will get the result in a separate e-mail as soon as possible

小虫a

回复 217# snic


    请问是什么意思啊？都是英文！晕啊！

hee

不错，谢谢了啊   
楼主辛苦了

snic

回复  snic


    请问是什么意思啊？都是英文！晕啊！
小虫a 发表于 2010-1-17 15:29

整篇也没什么东西，每家防毒都这样做的

只是讲如果你的档案被AVG列为病毒你可以上传给AVG作分析，其回覆结果有三种
1.AVG认定非误报，如果你依然认为这档案是没危险的请设排除
2.AVG认定为误报，将再下一次更新时作修正
3.再传一次进一步更深入的分析

scv1979

学习了。

不会飞的鸟

写的不错，搂住辛苦了