卡饭论坛's Archiver



浪滔天 发表于 2008-8-11 23:44

卡巴 8.0.0.454 语言文件的一些问题

[size=2]在汉化过程中,发现了一些语言文件中的问题,就发出来探讨一下(已反馈给官方)[/size]
[size=2][/size]
[size=5][color=blue][b]1 [/b][/color][/size]
[size=2][/size]
[size=2]在 prot.loc 文件中,有两行:[/size]
[size=2][/size]
[size=2][color=red]#evtProcessStop[/color]         = l_appInfo = nDestPID > 0 ? f_ProcessInfo(nDestPID).Module : appInfo(@1); "close application <b>" + f_AppNameEx(l_appInfo) + "</b> or get access to it with delete privileges"[/size]
[size=2]
[color=red]#evtProcessStop[/color]         = "stop" + if(@1, " " + $ObjectTypeTextLoCase)

开头都是“ [color=red]#evtProcessStop[/color] ” ,两个不同的语句都使用这个标头,如果被触发并使用到这个语句时,就会产生问题。
[/size][size=2][/size]
[size=5][color=blue][b]2 [/b][/color][/size]
[size=2][/size]
[size=2][size=2]hips.loc 文件中的语句:[/size]
[size=2][/size]
[size=2]KL[color=red]UseBrowserCL[/color]              = "[color=red]Use command line of browser[/color]"
KL[color=yellowgreen]UseBrowserAPI[/color]             = "[color=yellowgreen]Using browser program interfaces[/color]"
KL[color=magenta]UseDNS[/color]                    = "[color=magenta]Using system program interfaces (DNS)"[/color]
KL[color=royalblue]UseBITS [/color]                  = "[color=royalblue]Using system program interfaces[/color]"
[/size]
[size=2][/size]
[size=2]prot.loc 文件中的语句:[/size]
[size=2][/size]
[size=2]#evt[color=red]UseBrowserCL[/color]        = "[color=red]use [/color]<a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>[color=red]browser command line[/color]</a>"
#evt[color=yellowgreen]UseBrowserAPI[/color]       = "[color=yellowgreen]use[/color] <a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>[color=yellowgreen]browser hidden function[/color]</a>"
#evt[color=magenta]UseDNS[/color]              = "[color=magenta]use[/color] <a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>[color=magenta]system function (DNS)[/color]</a> [color=magenta]for hidden sending of data through the network[/color]"
#evt[color=royalblue]UseBITS[/color]             = "[color=royalblue]use[/color] <a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>[color=royalblue]system function[/color]</a> for [color=royalblue]hidden sending of data through the network[/color]"[/size]
[size=2]

[/size][size=2]report.loc 文件中的语句:[/size]
[size=2][/size]
[size=2]#evt[color=red]UseBrowserCL[/color]        = "[color=red]Use command line of browser[/color]"
#evt[color=yellowgreen]UseBrowserAPI [/color]      = "[color=yellowgreen]Use browsers API[/color]"
#evt[color=magenta]UseDNS [/color]             = "[color=magenta]Use DNS system function for hidden sending of data[/color]" + ($ObjectText ? " [color=magenta]to the network address[/color]" : " [color=magenta]through the network[/color]")
#evt[color=royalblue]UseBITS[/color]             = "[color=royalblue]Use system function for hidden sending of data through the network[/color]"
[/size]
[size=2][/size]
[size=2]这三个文件中的四个语句(相同颜色标示的)应该使用相同的文字来表达意思,但却使用了不同文字,这样在hips的设置界面和弹出的权限提升提示框以及事件通知窗口这三个地方就会出来完全不同的文字,造成用户理解困难,类似相同状况下在不同界面使用的语言文字不一致的地方还有不少,也许在用词上应该更严谨些,这样能方便用户的理解。[/size]



[b][size=5][color=blue]3[/color][/size][/b]


[size=2]prot.loc 文件中的语句:[/size]
[size=2][/size]
[size=2][color=red]314[/color]     = "Virus authors use constructor utilities to create new malicious programs and Trojans. There are known constructor tools designed to create viruses for DOS, Windows, and macro viruses. They can be used to generate virus source code, object modules and/or infected files."[/size]
[size=2]
[color=red]314[/color]     = "Utilities designed for easier development of computer viruses and their examination for hacking purposes."

[/size][size=2]这里开头有两个都是:“[color=red]314[/color]” ,重复了,我测试了下,第一个应该是“300”,这样的话在扫描到这种病毒的时候在提示窗口中显示的病毒描述就会出现错误。[/size]


[size=2][/size]
[size=2]该文件中还有对木马的分类:[/size]
[size=2][/size]
[size=2]100     = "Trojan-ArcBomb (\"bombs\" in archives)"
102     = "Trojan"
103     = "Trojan-AOL"
104     = "Trojan-Clicker"
105     = "Trojan-Downloader"
106     = "Trojan-Dropper"
107     = "Trojan-MSN"
108     = "Trojan-Notifier"
109     = "Trojan-Proxy"
110     = "Trojan-PSW"
111     = "Trojan-Spy"
112     = "Trojan-DDoS"
114     = "Trojan-IM"
115     = "RootKit"
116     = "Trojan-SMS"[/size]
[size=2]

[/size][size=2]以及对这些类型木马的描述:[/size]
[size=2][/size]
[size=2]100     = "These Trojans are archived files intentionally malformed to sabotage the de-compressor when it attempts to open such file. The affected machine will slow down or crash when the Trojan bomb is triggered, or its disk will be filled with garbage data. ArcBombs are especially dangerous for file and email servers, particularly when incoming data is initially processed automatically: in such cases, an ArcBomb can crash the server."
102     = "This class includes a wide variety of programs that perform actions without the user's knowledge or consent: collecting data and sending it to a cyber criminal, destroying or altering data with malicious intent, causing the computer to malfunction, or using a machine's capabilities for malicious or criminal purposes."
103     = "Currently there is no description available for Trojan-AOL."
104     = "Trojans belonging to this family redirect target computers to specified web sites or other Internet resources without user authorization. Clickers either send the necessary commands to the browser or replace system files where standard Internet URLs are stored (e.g. the 'hosts' file in MS Windows)."
105     = "Trojans of this family download and install new malware, Trojans or adware to the target computer. The downloader then either launches the new malware or registers it to enable autorun according to the local operating system requirements. All these steps are performed without the knowledge or consent of the user."
106     = "These Trojans are used to install other malware on target computers without the knowledge of their users. Droppers install their payload either without displaying any notification, or displaying a false message about an error in an archived file or incorrect version of the operating system. The new malware is dropped to a specified location on local disk (to the root of the C: drive, to a temporary directory, to Windows directories) and then launched."
107     = "Currently there is no description available for Trojan-MSN."
108     = "These Trojans inform their 'master' about an infected computer. Notifiers confirm that a computer has been successfully infected, and send information about its IP address, open port numbers, email address etc. This information may be delivered by email, in a special request to the master's website, or in an ICQ message."
109     = "Trojans of this family function as proxy servers providing anonymous access to the Internet from infected computers. These Trojans are typically used to spread spam."
110     = "This family (PSW — Password-Stealing-Ware) includes Trojans that steal passwords, usually system passwords from target machines. When launched, PSW Trojans search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send that information to email address(es) coded in the body of the Trojan."
111     = "These Trojan spies collect various information about the users of infected computers including keystrokes, screenshots, lists of active applications, and user actions, forwarding the data to their masters. Trojans of this type are often used to steal user identify information related to banking and other online payment systems."
112     = "Currently there is no description available for Trojan-DDoS."
114     = "Currently there is no description available for Trojan-IM."
115     = "Rootkit is a software code or method designed to hide the presence of certain objects within a computer system (processes, files, registry keys, etc.)."
116     = "This type of programs infects mobile phones."
[/size]
[size=2]
[/size][size=2]但在扫描到这些不同类型的木马时,提示窗口显示的木马类型都是 102 对应的文字: "Trojan" [/size]
[size=2][/size]
[size=2]木马描述都是 102 对应的描述:

"This class includes a wide variety of programs that perform actions without the user's knowledge or consent: collecting data and sending it to a cyber criminal, destroying or altering data with malicious intent, causing the computer to malfunction, or using a machine's capabilities for malicious or criminal purposes."
[/size][/size]
[size=2][size=2][/size][/size]
[size=2][size=2]
既然在语言文件中有对这些木马的分类和描述,在扫描到这些不同类型的木马时在提示窗口就应该出现相对应的木马类型和描述,但现在不管什么类型却都是显示以上相同的描述,这可能是一个bug ,虽然对使用不会有什么影响,但正确显示可以让用户了解这些木马具体会造成什么损害。

当然这些并不是什么大问题,只想说明一下,并非只有官方汉化有缺陷,英文原版的语言也存在缺陷,同时也想说明一下,民间汉化也许会比官方汉化做得更细致。
提出这些问题只是想让卡巴做得更好。
[/size]

[/size]

[[i] 本帖最后由 浪滔天 于 2008-9-7 14:54 编辑 [/i]]

dd888 发表于 2008-8-11 23:47

辛苦了!!!

zwl2828 发表于 2008-8-12 06:53

严谨才是好事!

laolaoliu 发表于 2008-8-12 07:12

如此的认真很感动, 受教了

cruiyong 发表于 2008-8-12 08:28

卡巴高手啊[:03:]

an0580na 发表于 2008-8-12 08:49

学习一下

303898443 发表于 2008-8-12 08:53

高手,偶是什么语言文件都不懂的。

age00001 发表于 2008-8-12 08:56

[:06:] 官方汉化首先想的是快点推出产品来赚钱,出点问题补丁解决.[:06:]

blog 发表于 2008-8-12 09:46

楼主真是细心人,赞一下

star_xing 发表于 2008-8-12 10:11

比较专业 赞~[:14:]

疯子的枫子 发表于 2008-8-12 10:26

[:01:] 赞一个,高手

sexing 发表于 2008-8-12 10:57

呵呵,,,非常仔细的朋友

听雨醉 发表于 2008-8-12 14:47

1、3的确是BUG。而2我认为不是。因为这里三个loc的描述意思其实是一样的,会分别在三个不同的地方显示。所以文字内容没有尽然相同。

GPRS9000 发表于 2008-8-12 18:58

楼主不简单啊!!!!!

浪滔天 发表于 2008-8-12 20:06

[quote]原帖由 [i]听雨醉[/i] 于 2008-8-12 14:47 发表 [url=http://bbs.kafan.cn/redirect.php?goto=findpost&pid=4470504&ptid=304675][img]http://bbs.kafan.cn/images/common/back.gif[/img][/url]
1、3的确是BUG。而2我认为不是。因为这里三个loc的描述意思其实是一样的,会分别在三个不同的地方显示。所以文字内容没有尽然相同。 [/quote]

[size=2]hips.loc 文件中的语句:

KL[color=yellowgreen]UseBrowserAPI[/color]             = "[color=yellowgreen]Using browser program interfaces[/color]"
[/size]
[size=2]prot.loc 文件中的语句:[/size]
[size=2]
#evt[color=yellowgreen]UseBrowserAPI[/color]       = "[color=yellowgreen]use[/color] <a onclick(dialog(\"HipsInfo\", p_action(" + @ + ")))>[color=yellowgreen]browser hidden function[/color]</a>"
[/size][size=2]
[/size][size=2]report.loc 文件中的语句:[/size]
[size=2]
#evt[color=yellowgreen]UseBrowserAPI [/color]      = "[color=yellowgreen]Use browsers API[/color]"
[/size]
[size=2]最典型的是这三个句子,说实话我也有点搞不懂,这个具体是防什么的。后来用一个使用浏览器隐藏发送数据的测试程序进行测试时才发现原来是这个功能。[/size]
[size=2][/size]
[size=2]第一个语句出现在hips的 “规则—权限—隐藏访问网络”下,按字面翻译就是“使用浏览器程序接口”,这个普通使用者很难明白是什么意思,第二句是在触发这个规则时在提示权限的窗口出现的,提示是“使用浏览器隐藏功能”,在这里还可以看到具体的描述,可以知道是隐藏发送数据的意思了,但在规则设置里的“使用浏览器程序接口”和提示出现的“使用浏览器隐藏功能”这两句普通用户很难把它们联系到一起来。第三句出现在右下角的通知窗口,提示“使用浏览器 API”,这里的“ API ”其实就是“程序接口”的缩写,但这样的话翻译者一般都会保留缩写不加翻译,普通用户很难理解,如果都直接用“使用浏览器隐藏发送数据”,用户一看就知道是什么意思。[/size]
[size=2]说实话,普通用户本来对 hips 都不是怎么了解,如果用词再有什么不一致的话,用户就很难知道出现的提示具体是和哪个功能相关联的。[/size]
[size=2][/size]
[size=2]还有最后用蓝色标出的三句,在规则设置中是“使用系统程序接口”,而提示和通知是“使用系统功能通过浏览器隐藏发送数据”,也很难把它们联系起来,而且具体是什么功能也不太清楚,在语言文件中看了描述文字才知道是使用“使用 BITS (后台智能传输服务)隐藏发送数据”的意思。[/size]

[size=2]当然这些确实不是bug,但用词的不一致就会给普通用户的使用和理解带来问题,而杀毒软件的用户绝大多数并非什么高手,语言文字上的一致性可以更方便普通用户的使用。[/size]
[size=2]希望卡巴能在下个版本的语言文字上做得更细致些。

[/size]

[[i] 本帖最后由 浪滔天 于 2008-8-12 20:22 编辑 [/i]]

xianjue 发表于 2008-9-15 11:03

深奥?
不懂得!!

yawa888 发表于 2008-10-2 09:26

谢谢分享 ![:01:] [:02:]

页: [1]

Powered by Discuz! Archiver 6.1.0  © 2001-2007 Comsenz Inc.