Uma kuziwa ekukhenikeni kwamafayela kuma-intanethi kanye nezixhumanisi kuma-virus, isevisi ye-VirusTotal ivame ukukhunjulwa kaningi, kodwa kunezifanekiselo ezifanisayo, ezinye zazo ezifanelwe ukunakwa. Enye yalezi zinsizakalo i-Hybrid Analysis, okuvumela ukuthi ungaskena kuphela ifayela kuma-virus, kodwa futhi inikeza ngamathuluzi engeziwe wokuhlaziya izinhlelo ezinonya nezinokuthi ziyingozi.
Kulesi sibuyekezo, uzothola ukuthi ungasebenzisa kanjani i-Hybrid Analysis ukuhlola ama-virus ku-intanethi, ukuba khona kwe-malware nezinye izinsongo, ukuthi le nsizakalo iyabonakala ngani, kanye nolunye ulwazi olwengeziwe olungase luzuze kumongo wesihloko embuzweni. Mayelana namanye amathuluzi okubhaliwe Ukuhlola ikhompyutha yakho ngama-virusi ku-intanethi.
Ukusebenzisa i-Hybrid Analysis
Ukuskena ifayela noma isixhumanisi sama-virus, i-AdWare, i-Malware kanye nezinye izinsongo, ngokuvamile kuwanele ukulandela lezi zinyathelo ezilula:
- Yiya kuwebhusayithi esemthethweni //www.hybrid-analysis.com/ (uma kunesidingo, kuzilungiselelo ungashintsha ulimi lwe-interface kwisiRashiya).
- Hudula ifayela kuze kufike ku-100 MB usayizi esiteshini sesiphequluli, noma ucacise indlela eya efayeleni, ungacacisa isixhumanisi ohlelweni ku-Inthanethi (ukwenza iskena ngaphandle kokulanda kukhompyutheni yakho) bese uchofoze inkinobho ethi "Hlaziya" (ngendlela, i-VirusTotal ikuvumela ukuthi uskena ama-virus ngaphandle ukulanda amafayela).
- Esikhathini esilandelayo, uzodinga ukwamukela imigomo yesevisi, chofoza okuthi "Qhubeka" (qhubeka).
- Isinyathelo esilandelayo esithakazelisayo ukukhetha ukuthi imuphi umshini ozosebenza uzosebenza leli fayela ukuze kuqinisekiswe okwengeziwe imisebenzi emsulwa. Ngemva kokukhetha, chofoza okuthi "Dala umbiko ovulekile".
- Ngenxa yalokho, uzothola imibiko elandelayo: umphumela wokuhlaziywa kwe-CrowdStrike Falcon, umphumela wokuskena ku-MetaDefender kanye nemiphumela ye-VirusTotal, uma ifayela elifanayo lihlolwe ngaphambilini.
- Ngemuva kwesikhathi esithile (njengoba imishini ebonakalayo ikhishwa, kungathatha cishe imizuzu engu-10), umphumela wokuhlolwa kwefayela kule mshini ozobonakala uzovela. Uma kuqalwe umuntu ngaphambilini, umphumela uzovela ngokushesha. Kuye ngemiphumela, kungase kube nokubukeka okuhlukile: uma kwenzeka imisebenzi esolisayo, uzobona "Enonya" kusihlokweni.
- Uma ufisa, ngokuchofoza kunoma yiliphi inani kule nsimu "Izinkomba" ungabuka idatha kwimisebenzi ethize yale fayela, ngeshwa, ngesikhathi samanje kuphela ngesiNgisi.
Qaphela: uma ungesona isazi, khumbula ukuthi iningi, ngisho nezinhlelo ezihlanzekile zizokwenza izenzo ezingaphephile (ukuxhumeka kumaseva, ukufundwa kwamanani okubhalisa nokunye okunjalo), akufanele udwebe iziphetho ezisuselwe kule data kuphela.
Ngenxa yalokho, ukuhlaziywa kwe-Hybrid kuyithuluzi elinamandla lokuskena ku-inthanethi kwamahhala wezinhlelo zokuba khona kwezinsongo ezihlukahlukene, futhi ngingancoma ukufaka uphawu lokubeka uphawu kusiphequluli futhi ngiyisebenzise ngaphambi kokuqalisa uhlelo olusanda kulandwa kukhompyutha.
Ekuphethweni - into eyodwa eyengeziwe: ngaphambilini kusayithi engichaze ukuthi i-CrowdInspect iyinhlangano enhle kakhulu yamahhala.
Ngesikhathi sokubhala, i-Umbuso yenza uhlelo lokuhlola usebenzisa i-VirusTotal, manje i-Hybrid Analysis isetshenziswa, futhi umphumela uboniswa kukholomu "HA". Uma kungekho miphumela yokuskena kwenqubo, ingahle ilayishwe ngokuzenzakalelayo kuseva (lokhu kuzomele unike amandla inketho "Layisha amafayela angaziwa" kuzinketho zohlelo).
