COMODO新出的测试工具

显示全部楼层 · 发表于 2008-11-11 14:10:33

那几个钩子DLL肯定有几个被报毒的，所以周大才说测试时关闭杀软

显示全部楼层 · 发表于 2008-11-11 19:53:31

za才190分~~~~~~~~好惨啊

1. Hijacking: ActiveDesktop	Vulnerable
2. Hijacking: AppinitDlls	Protected
3. Hijacking: ChangeDebuggerPath	Vulnerable
4. Hijacking: StartupPrograms	Vulnerable
5. Hijacking: SupersedeServiceDll	Vulnerable
6. Hijacking: UIHost	Vulnerable
7. Hijacking: Userinit	Protected
8. Hijacking: WinlogonNotify	Vulnerable
9. Impersonation: BITS	Vulnerable
10. Impersonation: Coat	Protected
11. Impersonation: DDE	Protected
12. Impersonation: ExplorerAsParent	Protected
13. Impersonation: OLE automation	Protected
14. InfoSend: DNS Test	Protected
15. InfoSend: ICMP Test	Protected
16. Injection: AdvancedProcessTermination	Protected
17. Injection: APC dll injection	Protected
18. Injection: CreateRemoteThread	Protected
19. Injection: DupHandles	Vulnerable
20. Injection: KnownDlls	Vulnerable
21. Injection: ProcessInject	Protected
22. Injection: Services	Vulnerable
23. Injection: SetThreadContext	Protected
24. Injection: SetWindowsHookEx	Protected
25. Injection: SetWinEventHook	Protected
26. Invasion: DebugControl	Vulnerable
27. Invasion: FileDrop	Vulnerable
28. Invasion: PhysicalMemory	Protected
29. Invasion: RawDisk	Vulnerable
30. Invasion: Runner	Protected
31. RootkitInstallation: ChangeDrvPath	Vulnerable
32. RootkitInstallation: DriverSupersede	Vulnerable
33. RootkitInstallation: LoadAndCallImage	Protected
34. RootkitInstallation: MissingDriverLoad	Protected

[ 本帖最后由 hanxiao1027 于 2008-11-11 19:54 编辑 ]

显示全部楼层 · 发表于 2008-11-11 20:33:44

和OP一样，吃没FD的亏。

显示全部楼层 · 发表于 2008-11-11 21:39:48

还好，就一项Vulnerable

显示全部楼层 · 发表于 2008-11-11 21:47:01

不光是FD
还有COM 防护
COM 防护也占了些比例

卡巴还是不行啊
虽然已经不错了

显示全部楼层 · 发表于 2008-12-25 23:03:32

OP2009加卡巴服务器8.0貌似得分不高啊..而且测试的时候卡巴也没报毒...
另外做这个测试不会中招吧
COMODO Leaktests v.1.1.0.1
Date       22:56:15 - 2008-12-25
OS       Windows 2003 SP2 build 3790
1. Hijacking: ActiveDesktop       Vulnerable
2. Hijacking: AppinitDlls       Protected
3. Hijacking: ChangeDebuggerPath       Vulnerable
4. Hijacking: StartupPrograms       Vulnerable
5. Hijacking: SupersedeServiceDll       Protected
6. Hijacking: UIHost       Vulnerable
7. Hijacking: Userinit       Protected
8. Hijacking: WinlogonNotify       Protected
9. Impersonation: BITS       Protected
10. Impersonation: Coat       Protected
11. Impersonation: DDE       Protected
12. Impersonation: ExplorerAsParent       Vulnerable
13. Impersonation: OLE automation       Protected
14. InfoSend: DNS Test       Protected
15. InfoSend: ICMP Test       Protected
16. Injection: AdvancedProcessTermination       Vulnerable
17. Injection: APC dll injection       Protected
18. Injection: CreateRemoteThread       Protected
19. Injection: DupHandles       Vulnerable
20. Injection: KnownDlls       Vulnerable
21. Injection: ProcessInject       Protected
22. Injection: Services       Protected
23. Injection: SetThreadContext       Protected
24. Injection: SetWindowsHookEx       Vulnerable
25. Injection: SetWinEventHook       Vulnerable
26. Invasion: DebugControl       Protected
27. Invasion: FileDrop       Vulnerable
28. Invasion: PhysicalMemory       Protected
29. Invasion: RawDisk       Vulnerable
30. Invasion: Runner       Vulnerable
31. RootkitInstallation: ChangeDrvPath       Protected
32. RootkitInstallation: DriverSupersede       Protected
33. RootkitInstallation: LoadAndCallImage       Protected
34. RootkitInstallation: MissingDriverLoad       Protected
Score       210/340

[ 本帖最后由 stamerbymen 于 2008-12-25 23:05 编辑 ]

显示全部楼层 · 发表于 2008-12-26 08:47:15

显示全部楼层 · 发表于 2008-12-26 12:00:52

红伞继续报毒。。。

显示全部楼层 · 发表于 2008-12-26 13:09:08

COMODO Leaktests v.1.1.0.1

Date 13:03:46 - 2008-12-26

OS Windows XP SP2 build 2600

1. Hijacking: ActiveDesktop Vulnerable
2. Hijacking: AppinitDlls Vulnerable
3. Hijacking: ChangeDebuggerPath Vulnerable
4. Hijacking: StartupPrograms Vulnerable
5. Hijacking: SupersedeServiceDll Vulnerable
6. Hijacking: UIHost Vulnerable
7. Hijacking: Userinit Vulnerable
8. Hijacking: WinlogonNotify Vulnerable
9. Impersonation: BITS Vulnerable
10. Impersonation: Coat Vulnerable
11. Impersonation: DDE Vulnerable
12. Impersonation: ExplorerAsParent Protected
13. Impersonation: OLE automation Vulnerable
14. InfoSend: DNS Test Protected
15. InfoSend: ICMP Test Vulnerable
16. Injection: AdvancedProcessTermination Vulnerable
17. Injection: APC dll injection Vulnerable
18. Injection: CreateRemoteThread Protected
19. Injection: DupHandles Vulnerable
20. Injection: KnownDlls Vulnerable
21. Injection: ProcessInject Protected
22. Injection: Services Vulnerable
23. Injection: SetThreadContext Vulnerable
24. Injection: SetWindowsHookEx Vulnerable
25. Injection: SetWinEventHook Vulnerable
26. Invasion: DebugControl Protected
27. Invasion: FileDrop Vulnerable
28. Invasion: PhysicalMemory Protected
29. Invasion: RawDisk Vulnerable
30. Invasion: Runner Vulnerable
31. RootkitInstallation: ChangeDrvPath Vulnerable
32. RootkitInstallation: DriverSupersede Vulnerable
33. RootkitInstallation: LoadAndCallImage Vulnerable
34. RootkitInstallation: MissingDriverLoad Protected
Score 70/340

呵呵看来卡巴7的HIPS功能还将就，天网防火墙的确是报得多，实际不杂地

显示全部楼层 · 发表于 2008-12-26 13:20:55

COMODO LEAKTESTS V.1.1.0.1
Date 楠 13:19:16 - 2008.12.26
OS Windows XP SP3 build 2600
1. Hijacking: ActiveDesktop Vulnerable
2. Hijacking: AppinitDlls Protected
3. Hijacking: ChangeDebuggerPath Vulnerable
4. Hijacking: StartupPrograms Vulnerable
5. Hijacking: SupersedeServiceDll Vulnerable
6. Hijacking: UIHost Vulnerable
7. Hijacking: Userinit Vulnerable
8. Hijacking: WinlogonNotify Vulnerable
9. Impersonation: BITS Vulnerable
10. Impersonation: Coat Vulnerable
11. Impersonation: DDE Vulnerable
12. Impersonation: ExplorerAsParent Vulnerable
13. Impersonation: OLE automation Vulnerable
14. InfoSend: DNS Test Vulnerable
15. InfoSend: ICMP Test Vulnerable
16. Injection: AdvancedProcessTermination Vulnerable
17. Injection: APC dll injection Vulnerable
18. Injection: CreateRemoteThread Vulnerable
19. Injection: DupHandles Vulnerable
20. Injection: KnownDlls Vulnerable
21. Injection: ProcessInject Vulnerable
22. Injection: Services Vulnerable
23. Injection: SetThreadContext Vulnerable
24. Injection: SetWindowsHookEx Vulnerable
25. Injection: SetWinEventHook Vulnerable
26. Invasion: DebugControl Vulnerable
27. Invasion: FileDrop Vulnerable
28. Invasion: PhysicalMemory Vulnerable
29. Invasion: RawDisk Vulnerable
30. Invasion: Runner Protected
31. RootkitInstallation: ChangeDrvPath Vulnerable
32. RootkitInstallation: DriverSupersede Vulnerable
33. RootkitInstallation: LoadAndCallImage Vulnerable
34. RootkitInstallation: MissingDriverLoad Protected
Score 30/340

毛豆3.5 无任何规则默认设置

[其他相关] COMODO新出的测试工具

回复 42楼 hanxiao1027 的帖子

本帖子中包含更多资源

浏览过的版块