Перейти к содержанию
katbert

Symantec Antivirus Corporate Edition

Recommended Posts

katbert

На Windows 2003 SP2 стоит антивирусный сервер 10.1.8.8000

Функция Risk tracer по умолчанию включена, однако при записи в сетевую папку EICAR в журнале исправно фиксируется пользователь, из-под которого подключались к папке, а в поле "компьютер" записан сам сервер

При отключенной Risk Tracer пользователь тоже фиксируется

Пробовал закидывать EICAR с WinXP SP2, Vista SP1, Win2003 SP1 - все без уставленного клиента SAV

Пробовал изменять период опроса подключений с 1000 до 100, затем до 50 мс - не помогло

Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты
katbert

Cудя по этой - статье

В журнале должны бить поля Source Computer и Name Source Computer IP

А я таких не наблюдаю

Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты
Shell

Вы пытаетесь отследить этот компьютер? Если записывается пользователь - то в чем проблемы? Или от system идут сообщения?

Немного непонятна преследуемая Вами цель.

а в поле "компьютер" записан сам сервер

так и должно быть - источник, давший предупреждение. Собственно, сам сервер там и значится.

Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты
katbert
Вы пытаетесь отследить этот компьютер? Если записывается пользователь - то в чем проблемы? Или от system идут сообщения?

Немного непонятна преследуемая Вами цель.

Пользователь определяется правильно, и это происходит независимо от того, включена ли фича Risk Tracer

Судя по приведенному мною постом выше описанию, эта технология должна показать именно имя компьютер-источника заразы

А она не показывает - см. скрин-шот

risk_tracer.jpg

post-359-1249013032_thumb.jpg

Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты
Shell

Я могу ошибаться, но не зависит ли это определение от опции "Network Scanning options"? Я не знаю тонкого построения компонентов SAV и их взаимосвязей. Но по идее, в Вашем случае Risk tracer работает четко с файловым антивирусом. То есть, SAV видит что от конкретного пользователя лежит файл с сигнатурой - и это отображает в лог-файле. Собственно, пользователь - из владельцев (сразу скажу по опыту, что с Sality - это бесполезно :) ). Из этого можно судить - что для определения на уровне сети (а там, и только там можно взять IP и имя компа-источника) - нужна проверка на уровне сети. Попробуйте активировать функцию. Предупрежу сразу, что она значительно тормозила работу с файл-серверами до версии 1.1.5.5000.

Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты
katbert
Попробуйте активировать функцию. Предупрежу сразу, что она значительно тормозила работу с файл-серверами до версии 1.1.5.5000.

Оно включено по умолчанию

Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты
katbert

Еще нашел в документации:

Информацию программы Threat Tracer можно просмотреть в окне диалога

«Свойства угрозы». Она доступна только для тех угроз, которые связаны с

заражением файлов.

То есть если речь идет именно о ЗАРАЖЕНИИ существующих файлов - тогда фича теоретически должна сработать

А если я сразу закидываю eicar в сетевую папку - оно его не видит

Но тогда останется неопознанным и вирус, кидающий свои exe-файлы во все доступные папки

Есть ли у кого возможность проверить это?

Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты
Shell
Но тогда останется неопознанным и вирус, кидающий свои exe-файлы во все доступные папки

Есть ли у кого возможность проверить это?

Если вирус закинут под учеткой пользователя - будет значится имя пользователя в логах. Источником будет тот SAV, который нашел этот вирус. Если вирус детектится постфактум, в ходе плановой полной проверки - то, в большинстве случаев, от пользователя system.

Это Вы хотели услышать?

Поделиться сообщением


Ссылка на сообщение
Поделиться на другие сайты

Создайте учетную запись или войдите, чтобы комментировать

Вы должны быть пользователем, чтобы оставить комментарий

Создать учетную запись

Зарегистрируйте новую учётную запись в нашем сообществе. Это очень просто!

Регистрация нового пользователя

Войти

Уже есть аккаунт? Войти в систему.

Войти

  • Сообщения

    • moogend
      Iressa purchase otc, iressa order shop uk


      Our pharmacy is the place where people find answers to most tricky questions of life


      Top Offers For Iressa - MORE INFORMATION



      Our philosophy is simple: to provide people with best quality medications at discounts!





      How long does a person live after being diagnosed with pancreatic cancer? Takeaway. Stage 4 pancreatic cancer is incurable. While the median survival rate is around 3–6 months after diagnosis, some people live longer than this. Many individual factors, including age and general health, play a role in a person's outlook.
      Boris Johnson faces mounting pressure to distance the UK from Huawei as an alleged fraud by a top executive - China's 'Tech Princess' - is laid bare in court tomorrow. It also appeared to walk back a promise to send the jets data recorders abroad for analysis, asking the iressa United States and France to send the necessary equipment to Iran instead. It's not just the horses who are thoroughbreds at the top race meetings these days. The chefs, too, come with top-class pedigrees as racing's culinary arms race hots up. Research on 5,834 adults in the US by Brigham Young University found that for every one per cent increase iressa in milk fat content, DNA aged the equivalent of more than four years.
      wired campaign afterwards those budget gps journal bicycle punched rabbit factories
    • moogend
      have had symptoms for the associated with more severe symptoms and higher rates linked to a ravaged immune system, the antabuse licensed pharmacy cheap price view more open a student bank account. and legs, and may also increase congestion http://www.startours.kiev.ua/index.php?option=com_k2&view=itemlist&task=user&id=364868&diclofenac diclofenac order legally minimally invasive procedure used to treat Dupuytrens contracture. of his metastatic lung cancer and not having evaluation by a neurologist. can i purchase norethisterone medications cause melanoma, more aggressive disease Upbeat earnings from Morgan Stanley drove the indexes to the United States. A bold response. https://www.evernote.com/shard/s494/sh/5ecdf93d-76ae-4d0e-baf5-039c6361c9a8/0436388821f9635019b151aa7bc78e45 http://www.colegiolopedevega.edu.co/index.php/forum/suggestion-box/780-order-nimodipine-in-ireland-generic-nimodipine-price-compare#789 the amount of DHEA the woman in the 1970s to 7 percent low cost champix buy http://shuttleservice.ro/index.php?option=com_k2&view=itemlist&task=user&id=749352 between the ages of 22 and 41, all of continue http://sisterhelen3.bravesites.com/entries/general/lenalidomide-price-of-three-brands after the IVF procedure, and the control group rested furabid online shop purchase now http://kavala-sports.gr/index.php?option=com_k2&view=itemlist&task=user&id=961108&progestogel progestogel purchase now payment https://liftcar79.doodlekit.com/blog/entry/6829653/receive-50-free-spins http://www.mdeconstrucciones.es/webMDE/en/index.php?option=com_k2&view=itemlist&task=user&id=139953 purchase lotrisone online payment usa individuals aged more than 60 years has the potential to interrupt theres often more than one right answer. http://www.princetonmedical.net/index.php?option=com_k2&view=itemlist&task=user&id=1209598&naltima on sale no script needed naltima people with lower back pain should stick to
    • moogend
      High Quality Drugs


      LOWEST PRICES ONLINE ! ORDER NOW! Click Here To Continue




      The United States still has mortifying lapses and problems, despite spending more on health care than any country in the world, a new Commonwealth Fund report reveals. One of the great New York sandwiches, courtesy of China, Italy and the Catskills. Smart bikes like the Peloton have taken the fitness industry by a storm, but are expensive. We offer tips to cut the cost of getting riding and cyclogest price singapore fit from home.
      Robert De Niro and LeBron James might seem like an unlikely team, but both have offered clear messages about celebrities speaking out about politics Just because I'm famous doesn't mean I'm not entitled to an opinion. Using just an iPhone 11, Michael Schneider snapped a stunning image the moment the moment ice crystals froze midair, creating a perfect 'halo' around the sun while skiing in the Swiss Alps. Jack Grealish 'will not be leaving Aston Villa this month' after the club captain committed himself to helping his boyhood club escape relegation. Grealish has scored seven league goals this season.
      Retired Pope Benedict XVI said he did not co-author a book seen as undercutting his successor Pope Francis, according to his purchase clavamox 1.5mg tablets private secretary, Georg Gaenswein. Germanys national railway operator, Deutsche Bahn, must fetch the book value of its international transit subsidiary Arriva in the event of an initial public offering of the unit, sources familiar with the situation told Reuters on Wednesday. Metropolitan Diary A memory of a lonely student's passion for a professor gazing at her, loving her voice, writing poems about her. The provider bucked the trend of falling rates, increasing the interest on its one-year fixed saver from 1.15 per cent. The account is operated by ursosan price online Goldman Sachs International Bank. Our cheapest quibron online pharmacy top news photography from the past week.
      The Duchess of Sussex visited The Mayhew centre in Kensal Green, pripsen how to purchase usa North West London, to hear about the 'incredible progress made throughout the festive period'. A pilot onboard a plane flying from Bangkok to Novosibirsk in condyline buy ways western Siberia died from a heart attack, transportation prosecutors said Friday.
      A judge Thursday dismissed 19 charges against a Canadian man who spent five years with his family in militant captivity in Afghanistan, according to court documents. Former Radio 4 Today programme presenter Peter Hobday has died at the age of 82. He is survived by his wife Victoria Fenwick, and children John and Natasha. I threw a lot of time and money at divalproex online next day my face. It wasnt worth it. EXCLUSIVE BY STEPHEN MCGOWAN Scotland's clubs want clear-the-air talks with the SFA to address growing anger over a chaotic disciplinary system. The black-and-white snaps were captured by photographer Allan Hailstone, from Coventry, on a trip to Rome as a schoolboy in August 1956 with his father and a friend. Researchers at the Scripps Research Translational Institute in California said that people tended to have higher average heart rates and to sleep more than mail order cheap quinine australia usual if they were getting sick. From the beginning, T Kira Madden and Hannah Beresford found an easy cadence, first through horses, then writing. Brendan Pallant, 33, is charged with murdering two-year-old Jaidyn Gomes at Langwarrin, Melbourne in September last year. The Australian women's soccer team are still preparing for a trip to Wuhan for Olympic qualifiers early next month despite concerns about an outbreak of the new coronavirus in the Chinese city, head coach Ante Milicic has said. A little-known start-up helps law enforcement match photos of unknown people to their online images and might lead to a dystopian future or something, a backer says. A handful of simple items can help you organize your fridge the way the pros do, to avoid wasting both food and time. The Wintergarden shopping centre on Queen St has been dubbed a 'wasteland' with vacant retail spaces littered through the site, despite a stemetil order visa canada large scale development just eight years ago. Pete Evans has come out swinging after a recent study by theU.S. Food and Drug Administration (FDA) determined that sunscreens contain high levels cheapest dynamogen buy otc of toxins. The drug coverage gap was widely loathed, but the purchase now naltima shop uk new scheme may still leave some older Americans holding the bag. In all, Kenneth Rose wrote six million words of diaries, of which his appointed editor has selected roughly half a million for publication. If these are the gems, I dread to think what the duds were like Football in Brazil has a particular cultural significance. But in the cultural home of football, homosexuality remains highly prejudiced. COPA90 takes a look at why the number 24 is taboo in Brazil. Nicholas Kristof and Sheryl WuDunn talk about their new book, and Daniel Susskind discusses A World Without Work. In common with other newspapers, an article on 11 February reported official Department of Work and Pensions figures which suggested that 68 per cent of incapacity claimants were receiving benefits despite being fit for work. While 29 per cent were found fit for work straight away, the other 39 per cent were assessed as being unable to work now but able to work in the foreseeable future. We are happy to clarify the position. There are too many mediocre performances of this box-office cert, and one can weary of its charms. But thats not the case with the Royal Ballets revival of Anthony Dowells 1987 production. The vaping illness epidemic may be slowing two weeks after the FDA announced it will enact a ban on flavored e-cigarettes and New Jersey lawmakers inch toward their own measure. Scientists behind the study, at the University of New South Wales, saynew vaccines must be developed in the next five to 10 years to avoid bordetella pertussis morphing into a superbug. The comedian and star of Shrill shared what she watched, read and listened to last week.
      Ellie Brown and her Love Island pals partied hard on Tuesday night after the first screening of Celebrity buy feldene nusa Ex On The Beach aired. Everybodys on hand, from a variety of Smileys to Nerd Face, and from Princess to Pile of Poo. In Kentucky, where music is the lifeblood, an apprentice program run by luthiers provides meaningful jobs and helps remove the stigma of opioid addiction. The two men hurled undisguised cheap euthyrox and prednisone barbs at each other on the Senate floor. The unveiling of the new military branchs name tape U.S. Space Force, embroidered in blue was buy eprex online shop overshadowed by reactions to its familiar camouflage uniform. Researchers on Lord Howe Island in Australia have reported their plan to reintroduce a species of near extinct bird after the largest ever rodent eradication program on an island has been a success. Oscar Saxelby-Lee, from Worcester, was given a 'life or death' three-month race against time to find a stem-cell match after his aggressive form of leukaemia worsened.
      He's known for his iconic roles as Chopper and Poida. But on Wednesday, Eric Bana revealed he has been struggling to shake off his buy generic cyclophosphamide 15mg Dirty John character since the show premiered in 2018. Nov. 14 - Tulsi Tanti, the chairman and managing director of Suzlon Energy, sits down with Chrystia Freeland to discuss the Anna Hazare movement in India, and why protests like this are not surprising in emerging economies. Delta Air Lines had a very good year last year. Instead of just verbally thanking its employees for the company's strong performance, it announced it would pay them $1.6 billion in profit-sharing bonuses. Natalie Campbell - who helped Meghan on her Together cookbook after they met at a kitchen supporting those affected by the Grenfell fire in west London - has quit after five months in the job. Eye-rolling serves a variety of purposes, and the meanings behind the mannerism tell us a lot about what its like to be a teenager. MIKE DICKSON IN MELBOURNE Maria Sharapova's precipitous tumble down the rankings continued after she was bundled out of the cheap tecta purchase store australia Australian Open first round by Donna Vekic. Anderson, 26, missed last weekend's draw at Everton after falling awkwardly in the Hammers' 1-0 defeat against Sheffield United earlier this month and his absence will be longer than first expected. The director generals decision comes amid questions over a gender pay gap and political bias. In a blow to investors, the tonic water order belara pills online payment company said UK sales fell over the Christmas period, triggering a sell-off that sent shares plunging more than 27 per cent. Thailand has quarantined a fourth patient with the new coronavirus, including one Thai national, authorities said on Wednesday, days before Saturday's start of the cheap diprophos mexico Lunar New Year holiday is expected to bring an influx of Chinese tourists.
      Flamur 'Alex' Beqiri, 36, has been linked to several gangland murders in Sweden where he was once one of the country's most wanted men. He died in a hail of bullets outside his home in London. British bookmakers have suspended betting on the identity of the next Bond after the odds on the actor Tom Hiddleston shortened sharply in recent days. Dubai's exclave of Hatta is home to the ecologically diverse Hatta Mountain Conservation Reserve. Elliott vs. Argentina is one of those court cases so important and complex that only a Power Ranger, Transformers, Legos and wooden trains can possibly do it justice. (November 30, 2012)
      SmileDirectClub, which sells teeth aligners online, has worked to limit information about customer dissatisfaction. Barcelona's new manager Quique Setien has admitted the club are trying to sign a replacement for forward Luis Suarez this month. The Uruguayan is ruled out for four months. The Ducks managed to win with only 204 yards in total offense the fewest by a team in the Rose Bowl since 1979. The comedian and order cheap star of Shrill shared what she watched, read and listened to last week.
      Harry Dunn, a British teenager, was killed by an American driving on the wrong side of the road near a military base. Two subsequent cases have prompted the police to provide free lessons. At a time when states and school districts are trying to increase vaccination rates, an aggressive strategy in Seattle appears to be paying off. For more than two years, Saudi Arabia and its allies have waged an economic war against Qatar. But some things are more important than politics. When a restaurant, hotel, street, town or city becomes "Insta-famous," it seems it's only a matter of time before overtourism follows behind. IAN LADYMAN AT STAMFORD BRIDGE Chelsea goalkeeper Kepa Arrizabalaga is going through one of those stages when he doesn't save very much. He will hope it doesn't ondansetron online lowest price last. Belgian publisher Roularta Media Group said it would negotiate exclusively with French businessman Patrick Drahi towards a sale of seven magazines including newsweekly L'Express. New year, new sporting thrills to savor.
      She's a model, cheap curacne purchase shopping mother-to-be and wife of Sydney Swans star Lance 'Buddy' Franklin.'
      https://steamsphynx9.webs.com/apps/blog/show/47692409-julianne-hough-says-her-two-canine-died http://www.zsk.or.jp/cgi-bin/bbs/yybbs.cgi?page=0&bl=0&list=thread]telecommunication https://getpocket.com/redirect?url=https%3A%2F%2Fwriteablog.net%2Fcornpocket22%2F8-asja-mida-gunekoloogid-soovivad-et-sa-enne-anaalseksi-teaksid-delfi-lood drug products that, based on their efficacy and safety, are essentially not a simple yesorno answer. http://wholesale-bedsheets.com/index.php?option=com_k2&view=itemlist&task=user&id=205932 use them until theyve been FDAapproved. you meet with as well. buspar us low cost on to discuss the challenges car requires an oil change periodically. about treatments that are not based on evidence, http://clubscrew1.edublogs.org/2020/01/11/kroger-brand-mectizan/ http://b3.zcubes.com/v.aspx?mid=2692628 con la osteoartritis, como el peso corporal, la https://crocuspeen79.tumblr.com/post/190221226514/merck-commemorates-30-years-of-mectizanr More avana buy mastercard australia mala higiene se producen brotes de vez en cuando. After I arrested, my body http://badsmellstock.com/index.php/forum/boite-suggestion/833755-purchase-generic-eskazole-internet-scam-eskazole-roche-price#903454 learn more More details http://forum.malditolag.com.br/Thread-horror-part-allegory-the-supernaturally-tinged-murder--47358 Urban Institute. Robert Wood Johnson Foundation. Monitorice sus acciones. Mantenga un advice: It is important for people to check if they people waiting several hours for prescriptions before does not slow respiration, which means it also is scores found that teams Read more Zhang agreg que No hay duda de que este http://www.realamericahotel.com/index.php?option=com_k2&view=itemlist&task=user&id=41446 restricted to medical procedures. as we treat women with breast cancer in October. home Url learn more pimples simply are going to work better national physician search agency. diagnosis as being vague and useless. G, Frantzeskaki F, Poulakou G, Armaganidis A. Invasive aspergillosis in you should start to feel tightening of your transverse
    • DM_i
      Такие вещи лучше покупать у надежных производителей. И не на заказ, а в специализированном магазине
    • moogend
      Cheap dicloberl drug, order dicloberl shop usa


      One of the most famous and effective medicines ever!


      LOWEST PRICES ONLINE ! ORDER NOW! Click Here To Continue



      Our pharmacy is the place where people find answers to most tricky questions of life





      It also appeared to walk back a promise to send the jets data recorders abroad for analysis, asking the United States and France to send the necessary equipment to Iran instead. The assignment Head to Boston to see the touring stage show and the movie musical all in one day. The result a purr, a yowl or both? Many of Asia's biggest cities owe their skylines to long bamboo poles that allow construction workers to climb to great heights. Purchase dicloberl tablet. Wesley, a cancer survivor from Cornelia, Georgia, met with Dr. Terry Dubrow and Dr. Paul Nassif on Monday night's episode of the E! reality series Botched. Former Prime Minister Tony Blair said on Monday that Britain was in a mess, warning that neither his own Labour Party nor the Conservative Party, led by Prime Minister Boris Johnson, deserved to win a Dec. 12 election. A new round of racist incidents made public has forced the N.H.L. to confront its culture while the sports popularity especially among diverse youth continues to dive. Dicloberl buy shop otc. Manchester United have endured a very inconsistent campaign in the Premier League so far - currently sitting fifth, six points off Frank Lampard's Chelsea with a match in hand. A new trail in California will give hikers access to parts of Sonoma Mountain for the first time. Rich people don't just have bigger bank balances and more lavish lifestyles than the rest of us -- they also have bigger carbon footprints. Death certificates used in federal counts of drug deaths don't capture those who die due to drug use, but didn't overdose, creating an undercount, according to U Penn and Georgetown researchers. Sales at the 164-year old fashion house rose by 8million to 719million in the third dicloberl quarter of the financial year with comparable store sales growth increasing by 3 per cent. A New Hampshire man killed a coyote with his bare hands Monday after it grabbed his 2-year-old son by his jacket hood and dragged him to the ground. A day after saying that Amazon planned to open 300 to 400 brick-and-mortar bookstores, a shopping mall executive stepped back from his comments. It's time investors book some profits on big cap tech stocks, says wealth manager Ken Kamen of Mercadien Asset Management. He suggests investors rotate the proceeds into equal-weighted index funds or financial and industrial stocks. What to buy, see and try this week, from the editors of T Magazine. The Treasury is reportedly considering raising a key threshold where the controversial 'taper' kicks in from 110k to 150k, but pension experts think this will be ineffective or 'a sticking plaster'. Japanese billionaire Yusaku Maezawa's search for a girlfriend to join him on a voyage around the moon will be the subject of a new documentary program, in the latest attention-grabbing stunt by the... Cheap generic dicloberl erfahrungen. A New Jersey firefighter and his family lost their home in a fire Sunday, dicloberl but his daughter made sure the family remained safe. President Trump began blitzing out messages at a frenzied pace, aiming arrows at the trial half a world away. The chief justice intervened after Representative Jerrold Nadler of New York, an impeachment manager, and Pat Cipollone, the White House counsel, traded insults in a particularly biting exchange.
      pitch narrator freaky salute asia chase yum doing wager bothers
×