盗号木马测试!

我爱舒畅

奇怪，主动防御怎么只拦截了一个

bridgewr

原帖由 微点卫士 于 2007-8-18 12:30 发表
微点；
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\1.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRAT ...

跑跑卡丁车牛盗v1.0改进版是个木马生成器，本身无害，微点不杀也没什么哈

不过设置生成后运行那个生成物就一起杀了。

碧水寒潭

Start of the scan: 2007年8月18日  22:07

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\4个盗号木马.rar
  [0] Archive type: RAR
  --> ÅÜÅÜ¿¨¶¡³µÅ£µÁv1.0¸Ä½ø°æ.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.LX.1
  --> xiaorong.exe
      [DETECTION] Is the Trojan horse TR/PSW.Stealer.33893
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.QX.8
  --> ºÃ.exe
      [DETECTION] Is the Trojan horse TR/Spy.Hacko.3
      [INFO]      The file was deleted!


End of the scan: 2007年8月18日  22:07
Used time: 00:11 min

The scan has been done completely.

      1 Scanning directories
      5 Files were scanned
      4 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

promised

拜托，这4个就别发来了
还有两生成器在里面

sandquick

NOD32检测到了

popfather

瑞星全杀

yczhou

NOD32倒是全检测出,只是只能杀掉一个活动的!

附图:

goodchipmka

NOD32杀。 。 。

gho

2007-8-19        12:06:08        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\跑跑卡丁车牛盗v1.0改进版.exe        New Malware.aj (Trojan)
2007-8-19        12:06:10        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\xiaorong.exe        Generic PWS (Trojan)
2007-8-19        12:06:10        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\1.exe        PWS-RXJH.dll (Trojan)
2007-8-19        12:06:10        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\好.exe        PWS-Mmorpg.gen (Trojan)