4.5 loses its update status - Mischel Internet Security Forum

Jobs | About | Blog | Contact

Download TrojanHunter Now
Free 30-day trial!

Latest TrojanHunter Version:
TrojanHunter 5.0

Order Now
License file delivered within minutes.

Welcome, Guest. Please Login or Register.

Aug 28^th, 2008, 2:21pm

   Mischel Internet Security Forum
   TrojanHunter
   LiveUpdate (Moderators: Helena, Gavin_Coe, Magnus)
   4.5 loses its update status

« Previous topic | Next topic »

Pages: 1

Notify of replies

Send Topic

Author

Topic: 4.5 loses its update status (Read 648 times)

GHatcher
Newbie

Gender:

Posts: 6

4.5 loses its update status
« on: Apr 4^th, 2006, 6:49pm »

Quote

Modify

I am running into an aggravating problem with 4.5. It is possible, the same thing was happening with 4.2 but I am un-sure.

I update TH with the latest updates including the 03-21 and 03-22 (3.2meg) and all is well. The next day I check updates and it tells me I have the latest updates installed.

A couple days later, I check updates and the 3-22 update begins downloading again and installs and TH says I am uptodate.

Again, a couple days later, I check updates and the 3-22 update begins downloading again and the scenerio is repeated.

I have attached jpg showing the contents of the rulesfile folder. This shows the update already there and yet it wants to download the 3-22 again.
http://206.128.27.80/th-rules.jpg

It seeems that TH is storing its update status somewhere else other than its own folder (perhaps a temp file) and that file is not protected from my cleanup program.

I run a popular cleanup program called Ccleaner to remove all my temp files, temp IE files, cache, etc.
My problem with TH losing its updates always begins just after running Ccleaner. Can you tell me where TH stores it info about the status of its downloads. It is not in the TH program folder. I am on 56K dialup and downloading a 3.2 meg file is a real pain when it is totally un-necessary.

I want to continue running Ccleaner and I need to have Trojan Hunter protect its files. How do I solve my problem?

addendum:
I found I have two Updatelist files. I am going to delete these and see if they will be recreated.

C:\Program Files\TrojanHunter 4.5\RuleFiles\UpdateList.txt
C:\Program Files\TrojanHunter 4.5\Tools\LiveUpdate\Temp\UpdateList.txt

« Last Edit: Apr 4^th, 2006, 7:14pm by GHatcher »

IP Logged

GHatcher
Newbie

Gender:

Posts: 6

Re: 4.5 loses its update status
« Reply #1 on: Apr 4^th, 2006, 10:15pm »

Quote

Modify

For now, it appears I have solved my problem--time will tell.

I did a un-install and folder delete.
Re-installed and updated using cumulative 4-4 updates.
Only 1 copy of updatelist.txt now and is in rules folder.
Rebooted and ran Ccleaner as my cleanup.
Trojan Hunter 4.5 did not try to download old updates.
Problem solved for now.

Been TH user for more than a year and no infections. Also using Norton NAV 2005 and XP Pro,
Also run Spyblocs6 as anti-spyware and Lavasoft Ad-aware.
All work together very well. By using Ccleaner, I find the other 3 programs have very little to remove.

IP Logged

Gavin_Coe
Trojan Analyst

Posts: 1971

Re: 4.5 loses its update status
« Reply #2 on: Apr 11^th, 2006, 11:06pm »

Quote

Modify

Hi, glad to hear all is well. Some vital info:

TH 4.5 updates will GENERALLY only be one small file. As this file approaches 100kb, it will stop being used and not get downloaded again. A second tiny file will be downloaded, and from then on that one gets updated. At 100kb the process repeats.

The CUMULATIVE update is installed and will generally not get updated.

However if we have to change a signature (for a false positive, or to improve a certain detection) then we may update the cumulative. This happened twice since the TH 4.5 release, so the cumulative update will download again.

Do not be fooled by the date filename, the filename is fixed at that date which will always be in the past. The size and date (last modified) is used to determine if an update is needed.

In short - if the updater downloads one of those files again, it is MEANT to because we updated it