[老佳前线]诺顿2010线产品已经能够查杀中华黑豹{已开贴}

显示全部楼层 · 发表于 2010-6-4 22:15:30

还好

显示全部楼层 · 发表于 2010-6-4 22:27:03

回复 jiayan72392 的帖子通过上报的，年初的“极虎”和以后的”鬼影”病毒都是通过这个网址上报的，新发现 ...
ming9888 发表于 2010-6-4 12:43

我想起了一个情况，你之前上报是上传的exe文件还是其他压缩格式的文件？

显示全部楼层 · 发表于 2010-6-4 22:44:46

佳哥辛苦

显示全部楼层 · 发表于 2010-6-5 09:24:34

回复 122# jiayan72392 的帖子根据诺顿的要求，我上报的均是用压缩软件压缩后的不加密文件，格式为zip或者rar。

显示全部楼层 · 发表于 2010-6-5 10:36:02

老佳肯定和诺顿的老板的女儿有某种关系。。

显示全部楼层 · 发表于 2010-6-5 11:57:12

回复 124# ming9888 的帖子

我个人的几次上传看下来，最好直接传exe文件。。。不要压缩，因为上报的文件首先是机器分析的，再传到人工。。。

显示全部楼层 · 发表于 2010-6-5 12:42:18

想更好的得到最佳的防护，我们用户真的要相互帮忙，那就是把诺顿MISS掉的病毒木马尽快上报，这样你的善举就很可能帮到其他的用户啦。这可谓一举多得。哈哈！

显示全部楼层 · 发表于 2010-6-5 12:42:36

回复 126# jiayan72392 的帖子还有这回事，我是看上面说明操作的，下回试试EXE。

显示全部楼层 · 发表于 2010-6-5 12:44:15

回复 jiayan72392 的帖子还有这回事，我是看上面说明操作的，下回试试EXE。
ming9888 发表于 2010-6-5 12:42

我昨晚又举报了一个样本，exe格式的，结果5分钟内就有回复了。。。

Jia Yan

This message is an automatically generated reply -- do not reply to this message.

This system is designed to analyze and process suspicious file submissions into Symantec Security Response and cannot accept correspondence or inquiries.

---------------------------------------------------------------------------

Submission Summary

---------------------------------------------------------------------------

We have processed your submission (Tracking #15741688). The following is a report of our findings for the files in your submission:

File:
110.exe

Machine: Machine

Determination: This file is detected as 'Trojan Horse' with our existing Rapid Release definition set.

URL: http://www.symantec.com/avcenter/venc/data/trojan.horse.html

---------------------------------------------------------------------------

Customer Notes

---------------------------------------------------------------------------

(Unspecified)

---------------------------------------------------------------------------

Developer Notes

---------------------------------------------------------------------------

110.exe is a repairable threat.

---------------------------------------------------------------------------

Remediation

---------------------------------------------------------------------------

Existing Rapid Release definitions contain the necessary updates for the files in your submission.

Downloading and Installing Rapid Release Definitions:

1. Open your Web browser. If you are using a dial-up connection, connect to any Web site, such as http://www.symantec.com

2.

Click on the following link to open our Rapid Release FTP Site. If it does not go to the FTP Site (this could take a minute or so if you have a slow

connection,) copy and paste the link into the address bar of your Web browser, and then press Enter.

Current Symantec Rapid Release Definitions ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease/

3.

Download the appropriate file to update your product. To identify the correct definition file format for your product, please review the information here:

Symantec Rapid Release Virus Definitions http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=rr

4. When a download dialog box appears, save the file to the Windows desktop. Either double-click the downloaded file and follow the prompts, or refer to your product documentation.

---------------------------------------------------------------------------

This message was generated by Symantec Security Response automation.

Should you have any questions about your submission, please contact our regional technical support from the Symantec Web site, and give them the tracking number included in this message.

Symantec Technical Support

http://www.symantec.com/techsupp/

显示全部楼层 · 发表于 2010-6-5 12:48:58

回复 129# jiayan72392 的帖子不错！以前没有注意到这一点，学到一招，大家如果发现铁壳不能查杀的病毒要积极上报了，O(∩_∩)O哈哈~

[资讯] [老佳前线]诺顿2010线产品已经能够查杀中华黑豹{已开贴}