在沙盒环境中执行文件并跟踪它
我有一个可能是病毒的文件。我想在某种形式的沙盒环境中执行该文件，并跟踪它尝试修改的文件或基本上它尝试执行的任何操作。我需要哪些软件工具和知识才能做到这一点？
我的系统是windows 7。
I have a file that could possibly be a virus. I'd like to execute the file in some form of a sandboxed environment and trace what files it tries to modify or basically anything that it is trying to do. What software tools and knowledge do I need to do this?
My system is windows 7.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
我将尝试在编程环境中将其视为逆向工程。您可以执行以下操作：
当然，你还可以走得更远。正如 Zyphrax 在他的回答中建议的那样，您最好在某种形式的虚拟机中执行此操作，前提是代码是危险的。
I'll try and see this in a programming context as reverse engineering. Here's some things you could do:
You could, of course, go further. As Zyphrax suggests in his answer, you are best doing this inside some form of virtual machine on the assumption that the code is dangerous.
您可以使用 Microsoft Virtual PC 或 VMWare 工作站/播放器设置虚拟机。
这应该可以防止对您的机器/系统造成任何损害。
要查看病毒的行为，您可以监视注册表/文件系统更改和网络活动。这些应用程序很容易通过 Google 找到：sysinternals 有一些免费的应用程序。
You could setup a virtual machine with Microsoft Virtual PC or VMWare workstation/player.
That should prevent any harm to your machine / system.
To see the actions of the virus you could monitor your registry/filesystem changes and network activity. These applications are easy to find with Google: sysinternals has a few free ones.
提供“沙盒”环境的一些选项。 （这就是问题所在？如果您可以在虚拟机中运行它，则不是）。
A few options that provide "a sandboxed" environment. (That was the question right? Not if you could run it in a VM).