siliconman01
Global Moderator
Trojans! Chew 'em Up, Spit 'em Out...
Gender: 
Posts: 6729
|
 |
Description of the Options in TrojanHunter Guard
« on: Mar 25th, 2006, 3:25pm » |
|
This describes the four(4) options available in TrojanHunter Guard (THGuard.exe or THGuard). These options are viewable and selectable in the Settings window of THGuard.
THGuard is TrojanHunter's real-time monitor for the computer system's RAM memory. It polls memory every 10 seconds, examining each process running in memory for malicious content.
The THGuard icon is located in the lower right Systray if it is loaded and running in memory. If THGuard is enabled, it will appear as an icon having a blue page and a red-handled spy glass over the page. If THGuard has been disabled, the icon will be gray with a red X over the gray page.
To view the settings.
Right click on the THGuard icon in the lower right Systray and select Settings in the drop down menu. Click on Ok to close the Settings window.
To Select or Change the settings.
Right click on the THGuard icon in the lower right Systray and select Settings in the drop down menu. Select/Check mark the desired options. Click on Ok to SAVE and close the Settings window.
Description of the Options
Protect against unauthorized shutdowns
Selecting this option prevents any process (malicious or otherwise) from closing or shutting down THGuard itself. The only way to shut down THGuard will be to Unload it either through the right click drop down menu or the Settings window of THGuard. Therefore, this option is a THGuard self protection option. Its use is strongly recommended. (See NOTE: at the bottom of this writeup.
Automatically remove trojans
Selecting this option gives THGuard permission and authority to remove any trojan or malicous element in memory that it discovers during the polling scan every 10 seconds. THGuard will remove the malicious element and then display an alert message on the desktop. Its use is strongly recommended.
Load on startup
Selecting this option places a startup entry in the system registry to direct Windows to start up THGuard each time the system boots. Its use is strongly recommended.
Scan all modules
Selecting this option controls whether THGuard scans for trojan modules that have been injected into other processes. Its use is strongly recommended
Enabled
This option must be selected to instruct THGuard to poll scan memory every 10 seconds. Its use is strongly recommended.
Always end viewing or changing the options by clicking on Ok. This button instructs THGuard to save all the settings and close the Setting window.
To shut down THGuard and remove it from memory, click on Unload. No settings changes will be saved.
The following features and options can be selected from the right click drop down menu of the THGuard icon in the lower right Systray.
- Settings (Open the THGuard settings window)
- Run TrojanHunter scanner (open TrojanHunter scanner's main window)
- Enabled (toggles the Enable option of THGuard. A check mark next to Enabled means that THGuard is enabled to protect memory)
- Unload TrojanHunter Guard (shuts down THGuard and removes it from memory. All protection is no longer active until THGuard is restarted).
NOTES:
1. If a user has additional security programs such as ProcessGuard or AppDefend on the system and these programs are actively providing protection against malicious termination, then the user may wish to not activate the TrojanHunter self protection option.
2. Some users have software configurations that do not function properly when THGuard's code injection for self protection is active. Unchecking the "Protect against unauthorized shutdowns" option will disable THSEC.DLL and stop THGuard from using code injection.
Applies to TrojanHunter V5.0 or later.
|
| « Last Edit: Sep 11th, 2007, 1:05am by siliconman01 » |
 IP Logged |
______
TrojanHunter V5.3.994...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound w/ XM satellite, Avira Premium Security Suite V10; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD Raptors, NIS 2011 Beta. Common: router, cable modem, PerfectDisk 11 Pro, Casper Backup V6.0, DisplayFusion, SpywareBlaster V4.3, HostsMan V3.2.73, CCleaner, TrojanHunter V5.3.994, etc.
|
|
|
Mischel Internet Security Forum
Notify of replies
Send Topic
Print
Author
Search
Members
Login
Register