看我走四方,装防线(更新中)

走南闯北用防线 发表于 2009-9-22 18:27

本帖最后由走南闯北用防线于 2009-9-22 18:37 编辑

第一站位置:哈尔滨机场

下载防线位置:
http://dl00.antiy.com/download/AGB7Install.exe
下载工具:迷你讯雷
下载花费时间:6'32''
环境:xp
360+nod32

安装遭遇问题:
能看到安装窗口名在任务栏但很久才看到安装窗口,不知道在干什么.

检测情况,高危险区查到5个,(3个文件两个cookie)全部清除,不过似乎记数有重复,可能是高危区域任务由重叠
但结果应该消重吧?

文件:病毒查杀
攻击时间:2009-09-22 18:09

xsbmon.exeVirus/Win32.Xorer.dr报告并记录c:\windows\system32\xsbmon.exe->c:\windows\system32
XsbMon.exeVirus/Win32.Xorer.dr报告并记录C:\WINDOWS\system32
xsbmon.exeVirus/Win32.Xorer.dr报告并记录c:\windows\system32

两个cookie哪里去了?

清除之后再看日志,也消重了,cookie 也出来了,测试的太不细致了...

文件:病毒查杀
攻击时间:2009-09-22 18:09

xsbmon.exeVirus/Win32.Xorer.dr清除完成c:\windows\system32
xp@smarttrade.allyes.txtCookie/Adware.Allyes清除完成c:\documents and settings\xp\cookies
xp@allyes.txtCookie/Adware.Allyes清除完成c:\documents and settings\xp\cookies

问题1:
查到3个文件,两个cookie ,但cookie居然不记入日志!!!

问题2:
软件版本显示为6.5.1.6

而网站上的版本升级说明如下.

http://www.antiyfx.com/img/down_034.jpg 安天防线版本升级说明·版本：6.5.1 时间：2009-08-07 11：30
[*]安天防线2009正式版发布。

·版本：6.1.6 时间：2009-06-12 16：30

另外:
导出的日志格式太难看了.

升级体验:
花费17秒,告诉我没有东西需要更新.

表扬:打包及时,下来的就有新的病毒库.
批评:需要这么久判断不需要升级,似乎慢于兄弟厂商.

对应提供相关网络位置信息与响应速度,供参考(防线站点关了ICMP,速度难以判定了):

Pinging www.antiyfx.com with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 59.108.103.78:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Pinging bbs.antiy.cn with 32 bytes of data:

Reply from 59.108.103.125: bytes=32 time=196ms TTL=115
Reply from 59.108.103.125: bytes=32 time=636ms TTL=115
Reply from 59.108.103.125: bytes=32 time=83ms TTL=115
Reply from 59.108.103.125: bytes=32 time=40ms TTL=115

Ping statistics for 59.108.103.125:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 40ms, Maximum = 636ms, Average = 238ms

Tracing route to bbs.antiy.cn
over a maximum of 30 hops:

1 *    *    * Request timed out.
2 17 ms 19 ms 16 ms218.10.118.129
3 838 ms 244 ms 16 ms221.212.1.149
4 19 ms 19 ms 16 ms221.212.1.133
5 303 ms 41 ms 41 ms61.167.6.49
6 43 ms 37 ms 40 ms219.158.6.177
7 41 ms 39 ms 39 ms202.96.12.42
8 40 ms 39 ms 39 ms61.148.155.46
9 584 ms 39 ms 40 ms61.148.146.106
10 39 ms 39 ms 42 msbt-203-018.bta.net.cn
11 42 ms 42 ms 115 ms61.49.35.202
12 *    *    * Request timed out.
13 *    *    * Request timed out.
14 *    *    * Request timed out.
15 *    *    * Request timed out.
16 42 ms 43 ms 43 msn003-000-000-000.static.ge.com
17 561 ms 126 ms 88 ms59.108.0.161
18 *    *    * Request timed out.
19 477 ms 202 ms 161 ms59.108.35.2
20 42 ms 42 ms 52 ms59.108.103.125

Trace complete.

Tracing route to www.antiyfx.com
over a maximum of 30 hops:

1 *    *    * Request timed out.
21440 ms1928 ms 413 ms218.10.118.129
31136 ms1321 ms 639 ms221.212.1.213
41432 ms1752 ms1414 ms61.138.0.13
5 45 ms 433 ms1338 ms61.167.1.29
6 890 ms 307 ms 53 ms219.158.12.93
71606 ms 977 ms1446 ms123.126.0.198
8 115 ms 42 ms 121 ms61.148.154.37
9 41 ms 39 ms 39 ms61.148.155.50
10 39 ms 39 ms 40 ms61.148.146.106
11 40 ms 42 ms 40 msbt-203-018.bta.net.cn
12 311 ms 42 ms 821 ms61.49.35.202
13 *    *    * Request timed out.
14 *    *    * Request timed out.
15 *    *    * Request timed out.
16

胖胖的西瓜 发表于 2009-9-22 18:56

LZ说明的挺详细的

研发组老李 发表于 2009-9-23 09:03

问题2:
软件版本显示为6.5.1.6

而网站上的版本升级说明如下.

第二个问题，我来说明一下：
这位网友朋友，防线网站的安装包版本升级，现在的规则是只指针对大版本改动进行说明，
但是我们已经在着手准备每天都会制作安装包，所以将在下周开始，将进行日更新及说明。

babaiai123 发表于 2009-9-23 10:18

非常感谢对防线09做了初步的体验.针对您的问题:
1.扫描消重目前还没有处理,我们尽快更新.
2.cookies不记入日志,主要考虑到cookies实属用户个人信息,我们就没有记入日志.
3.日志导出格式我们已经在修改了,近期会更新.

走南闯北用防线 发表于 2009-9-25 00:40

第二站：222.177.11.180重庆市电信

下载防线位置:
http://dl.antiy.com/download/AGB7Install.exe
下载工具:网页讯雷
下载花费时间:22'32''
由于时间太长，中途转由华军一个重庆电信节点下载。该节点上的安装包库为9月18日。
环境:xp
360
CPU 1.5GHZ 512m ram

安装问题：
同第一站，很长时间不知道安装程序在做什么。

升级：从9月18日升级上来，耗时3'12'
升级问题：升级完界面的库日期不更新

杀毒问题：
检测到16个，全部清除
同样是cookies，为何有的显示类型为广告插件，有的类型为追踪cookies

各站网络信息

Pinging dl.antiy.com with 32 bytes of data:

Control-C

Pinging dl.antiy.com with 32 bytes of data:

Request timed out.

Request timed out.

Request timed out.

Request timed out.

Ping statistics for 59.108.103.101:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Pinging dl00.antiy.com with 32 bytes of data:

Request timed out.

Request timed out.

Request timed out.

Request timed out.

Ping statistics for 125.211.216.36:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Pinging www.antiyfx.com with 32 bytes of data:

Request timed out.

Request timed out.

Request timed out.

Request timed out.

Ping statistics for 59.108.103.78:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Pinging www.antiy.com with 32 bytes of data:

Reply from 221.207.255.62: bytes=32 time=80ms TTL=114

Reply from 221.207.255.62: bytes=32 time=80ms TTL=114

Reply from 221.207.255.62: bytes=32 time=80ms TTL=114

Reply from 221.207.255.62: bytes=32 time=80ms TTL=114

Ping statistics for 221.207.255.62:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 80ms, Maximum = 80ms, Average = 80ms

Pinging p8p.geo.vip.mud.yahoo.com with 32 bytes of data:

Reply from 68.142.212.70: bytes=32 time=234ms TTL=45

Reply from 68.142.212.70: bytes=32 time=241ms TTL=45

Reply from 68.142.212.70: bytes=32 time=234ms TTL=45

Reply from 68.142.212.70: bytes=32 time=237ms TTL=45

Ping statistics for 68.142.212.70:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 234ms, Maximum = 241ms, Average = 236ms

Pinging dl.antiy.com with 32 bytes of data:

Request timed out.

Request timed out.

Request timed out.

Request timed out.

Ping statistics for 59.108.103.101:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Pinging dl00.antiy.com with 32 bytes of data:

Request timed out.

Request timed out.

Request timed out.

Request timed out.

Ping statistics for 125.211.216.36:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Tracing route to www.antiyfx.com

over a maximum of 30 hops:

1 3 ms 2 ms 2 ms192.168.100.1

2 1 ms 1 ms 1 ms10.10.10.1

3 3 ms 4 ms 1 ms222.177.11.190

4 1 ms 4 ms 2 ms222.177.0.213

5 1 ms 2 ms 2 ms222.176.3.1

6 29 ms 25 ms 28 ms222.176.3.165

7 53 ms 54 ms 53 ms202.97.34.53

8 57 ms 56 ms 55 ms202.97.57.214

9 68 ms 66 ms 57 msbj141-138-198.bjtelecom.net

10 56 ms 58 ms 57 ms219.142.15.194

11 191 ms 61 ms 59 ms59.108.1.33

12 57 ms 60 ms 59 ms172.16.100.10

13 61 ms 58 ms 57 ms59.108.35.2

14 *    *    * Request timed out.

15 *    *    * Request timed out.

16 *    *    * Request timed out.

17 *    *    * Request timed out.

18 *    *    * Request timed out.

19 *    *    * Request timed out.

20 *    *    * Request timed out.

21 *    *    * Request timed out.

22 *    *    * Request timed out.

23 *    *    * Request timed out.

24 *    *    * Request timed out.

25 *    *    * Request timed out.

26 *    *    * Request timed out.

27 *    *    * Request timed out.

28 *    *    * Request timed out.

29 *    *    * Request timed out.

30 *    *    * Request timed out.

Trace complete.

Tracing route to www.antiy.com

over a maximum of 30 hops:

1 2 ms 2 ms 2 ms192.168.100.1

2 2 ms 1 ms <1 ms10.10.10.1

3 3 ms 2 ms 4 ms222.177.11.190

4 3 ms 3 ms 2 ms222.177.0.213

5 *    2 ms 6 ms222.176.3.5

6 36 ms 33 ms 36 ms222.176.2.250

7 30 ms 31 ms 33 ms202.97.60.162

8 *    *    * Request timed out.

9 60 ms 60 ms * 219.158.5.13

10 86 ms 84 ms 84 ms219.158.6.114

11 92 ms 88 ms 90 ms61.167.2.34

12 83 ms 85 ms 84 ms221.212.1.134

13 83 ms 82 ms 86 ms221.212.1.22

14 98 ms 88 ms 93 ms221.212.1.102

15 85 ms 107 ms 269 ms218.10.118.54

16 85 ms 84 ms 86 ms221.207.255.62

Trace complete.

Tracing route to p8p.geo.vip.mud.yahoo.com

over a maximum of 30 hops:

1 3 ms 2 ms 2 ms192.168.100.1

2 1 ms 3 ms 2 ms10.10.10.1

3 2 ms 2 ms 3 ms222.177.11.190

4 4 ms 2 ms 1 ms222.177.0.213

5 25 ms 14 ms 24 ms222.176.3.1

6 32 ms 29 ms 30 ms222.176.2.238

7 28 ms 29 ms 34 ms202.97.34.209

8 30 ms 31 ms 30 ms202.97.60.62

9 318 ms 225 ms 200 ms202.97.51.230

10 207 ms 207 ms 207 ms218.30.54.150

11 283 ms 241 ms 239 msYahoo.TenGigabitEthernet3-4.ar4.DAL2.gblx.net

12 243 ms 252 ms 383 msae2-p101.msr1.mud.yahoo.com

13 249 ms 250 ms 252 msv205.bas3.mud.yahoo.com

14 245 ms 240 ms 237 msp8p.geo.vip.mud.yahoo.com

Trace complete.

Tracing route to dl.antiy.com

over a maximum of 30 hops:

1 4 ms 2 ms 2 ms192.168.100.1

2 1 ms 1 ms 1 ms10.10.10.1

3 6 ms 7 ms 3 ms222.177.11.190

4 13 ms 2 ms 4 ms222.177.0.213

5 *    111 ms 40 ms222.176.3.1

6 30 ms 31 ms 27 ms222.176.3.165

7 58 ms 57 ms 53 ms202.97.34.53

8 *    56 ms 55 ms202.97.57.214

9 68 ms 58 ms 56 msbj141-138-198.bjtelecom.net

10 57 ms 66 ms 62 ms219.142.15.194

11 65 ms 63 ms 59 ms59.108.1.33

12 56 ms 58 ms 57 ms172.16.100.2

13 56 ms 60 ms 78 ms59.108.35.2

14 *    *    * Request timed out.

15 *    *    * Request timed out.

16 *    *    * Request timed out.

17 *    *    * Request timed out.

18 *    *    * Request timed out.

19 *    *    * Request timed out.

20 *    *    * Request timed out.

21 *    *    * Request timed out.

22 *    *    * Request timed out.

23 *    *    * Request timed out.

24 *    *    * Request timed out.

25 *    *    * Request timed out.

26 *    *    * Request timed out.

27 *    *    * Request timed out.

28 *    *    * Request timed out.

29 *    *    * Request timed out.

30 *    *    * Request timed out.

Trace complete.

Tracing route to dl00.antiy.com

over a maximum of 30 hops:

1 2 ms 3 ms 2 ms192.168.100.1

2 2 ms 2 ms <1 ms10.10.10.1

3 4 ms 5 ms 2 ms222.177.11.190

4 14 ms 8 ms 3 ms222.177.0.213

5 3 ms 1 ms 3 ms222.176.3.1

6 35 ms 29 ms 37 ms222.176.2.226

7 31 ms 28 ms 34 ms202.97.60.234

8 *    *    * Request timed out.

9 62 ms 60 ms 63 ms219.158.11.65

10 86 ms 84 ms 84 ms219.158.7.50

11 80 ms 82 ms 81 ms61.167.1.38

12 93 ms 90 ms 86 ms61.167.2.121

13 82 ms 81 ms 87 ms61.167.2.90

14 85 ms 80 ms 87 ms125.211.199.154

15 *    *    * Request timed out.

16 *    *    * Request timed out.

17 *    *    * Request timed out.

18 *    *    * Request timed out.

19 *    *    * Request timed out.

20 *    *    * Request timed out.

21 *    *    * Request timed out.

22 *    *    * Request timed out.

23 *    *    * Request timed out.

24 *    *    * Request timed out.

25 *    *    * Request timed out.

26 *    *    * Request timed out.

27 *    *    * Request timed out.

28 *    *    * Request timed out.

29 *    *    * Request timed out.

30 *    *    * Request timed out.

Trace complete.

研发组老李 发表于 2009-9-25 08:33

第二站：222.177.11.180重庆市电信

下载防线位置:
http://dl.antiy.com/download/AGB7Install.exe
下载工具:网页讯雷
下载花费时间:22'32''
由于时间太长，中途转由华军一个重庆电信节点下载。该节点上的 ...
走南闯北用防线发表于 2009-9-25 00:40 http://bbs.antiy.cn/images/common/back.gif

能够在全国各处实地测试防线升级能力，十分感谢您的支持，
防线将各地对升级节点的承载能力记录并评估，
相信不久我们可以在国内各地建立负载均衡的升级服务系统。

babaiai123 发表于 2009-9-25 09:34

很感谢您,又一次提出问题.
杀毒问题：
检测到16个，全部清除
同样是cookies，为何有的显示类型为广告插件，有的类型为追踪cookies

安天防线检测cookies功能中,可以检测出多类可疑,追踪cookies 这类主要列出cookies缓存中存在访问过的网站记录了您的地理位置或者您的计算机属性,能够精确到您的位置.我们对这些信息判断为可疑.

页: [1]

创意安天's Archiver

看我走四方,装防线(更新中)