Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
May 16th, 2008, 4:54am
   Mischel Internet Security Forum
   TrojanHunter
   Beta Testing (Moderators: Helena, Gavin_Coe, Magnus)
   TrojanHunter 5		 « No topic | Next topic »
Pages: 1 2 3    Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: TrojanHunter 5  (Read 5517 times)
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4076
TrojanHunter 5
« on: Jan 30th, 2006, 2:35pm »
I'm currently planning for TrojanHunter 5 and would like some input on the TrojanHunter user interface from the ones who will be using the product - namely you, the users.
 
Specifically, I would like to know if there's a demand for a more "easy to use" interface. Basically this would mean that scanning could be as simple as just clicking a button to scan the entire computer and would also get rid of most of the more advanced options.  
 
Another aspect I'm looking at is to make detection of suspicious files look less alarming. What I'm thinking is that when "possible trojan files" are found, the user would be told:
 
- Your scan was clean but we found some files that could potentially be malware
 
- ...and be presented with a dialog saying "Would you like to submit these suspicious files for analysis and get an email back if we determine them to be malware"?
 
The reasoning behind this is that I suspect many users don't like to fiddle around with too many options and would mainly just like to scan their system for trojans with the default settings.
 
Any and all input is appreciated. Also, if there's anything you really like/don't like about the current user interface, be sure to mention it.
IP Logged
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW   Email

Gender: male
 Posts: 2883
Re: TrojanHunter 5
« Reply #1 on: Jan 30th, 2006, 3:22pm »
Rather than default to scanning My Computer, I think it would be better to default to scanning the C: drive only.  Most users have all their program files on the C: drive, and the others {D., E:, etc.} are usually optical drives {CD, DVD} and sometimes removeable or external drives {Zip, USB, firewire}.  You could have a supereasy default interface but make it evident how the advanced user can switch interfaces. perhaps by just clicking Advanced Interface button or something like that. Wink
IP Logged
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW   Email

Gender: male
 Posts: 2883
Re: TrojanHunter 5
« Reply #2 on: Jan 30th, 2006, 3:27pm »
While on this topiic:  Might I also be so bold to suggest somthing you have not mentioned: not related to user interface, but a technical issue.  I am unfamiliar with the details of the fingerprinting algorithm but I have been wondering if that needs to be improved to eliminate or reduce probability of false positives; since it seems we have had an awful lot of f.p. threads lately.  I realize Gav is adding tons of signatures but just wondering if something needs to be done about that Huh  Just thinking out loud .. no offense .. Wink
« Last Edit: Jan 30th, 2006, 3:29pm by Randy_Bell » IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4076
Re: TrojanHunter 5
« Reply #3 on: Jan 30th, 2006, 3:31pm »
There are two reasons for the slightly-more-than-average FPs lately: Gavin is getting accustomed to the TH signature creation process and also because of the huge amount of new trojans being added. I expect things will settle down soon.  
 
If it does turn out to be a problem with FPs owing to the number of new trojans added then I think that could be solved by introducing separate "beta" definition updates, but I really don't expect it to be a problem.
IP Logged
dave6508
Newbie
*





   


Gender: male
 Posts: 1
Re: TrojanHunter 5
« Reply #4 on: Feb 1st, 2006, 12:48am »
I think there should be two different versions of TrojanHunter. A simplified and an advanced version. Simplified, like the one now you are considering for version 5,  for the beginner and those who just want simplicity. No confusion and user friendly. Then an advanced version with at least the options the older version 4.1 had. Especially custom rules option which is very useful. The majority of TrojanHunter customers may not be advanced users, but alot of us are and we're really disappointed (comments from different forums) that those options were excluded. Of course you can't please everybody, but it would be nice to include a version for the power user..................dave6508
 
P.S. Doesn't matter much to me between two versions or a switchable GUI (basic/advanced). As long as one has choices, but a switchable interface seems to make more sense. Roll Eyes
« Last Edit: Feb 2nd, 2006, 2:16am by dave6508 » IP Logged
doubledown
Full Member
***





   


Posts: 142
Re: TrojanHunter 5
« Reply #5 on: Feb 1st, 2006, 5:28am »
on Jan 30th, 2006, 2:35pm, Magnus wrote:

Another aspect I'm looking at is to make detection of suspicious files look less alarming. What I'm thinking is that when "possible trojan files" are found, the user would be told:
 
- Your scan was clean but we found some files that could potentially be malware
 
- ...and be presented with a dialog saying "Would you like to submit these suspicious files for analysis and get an email back if we determine them to be malware"?

 
Yes, I think that's an excellent approach, not so alarming for the user and just a one-click process for submitting suspect files, I think that's exactly what most people would want.
 
In terms of versions/interfaces - I think Randy's idea of a nice simple default interface with no options to tweak, but then a one-click switch to an advanced interface with all the options would also be excellent. I think that would also remove any need to have two versions of the program.
 
Maybe a slightly simplified process if a trojan is detected is a possibility? Instead of the user needing to remove the .tcf extension themselves - they could be offered a one-click option to "re-activate" the file - i.e. TH would do the .tcf removal itself, for instance if an FP was confirmed. I suppose the downside of that is perhaps making it too easy for people to unintentionally re-activate an actual trojan.
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 1820
Re: TrojanHunter 5
« Reply #6 on: Feb 1st, 2006, 7:37am »
Be even nicer if when FP were fixed, it knew to check for those detected files from logs and RESTORE the file automatically (if set to auto clean) or confirm from the user first Wink
IP Logged
alpha128
Newbie
*





   


Posts: 34
Re: TrojanHunter 5
« Reply #7 on: Feb 1st, 2006, 9:48pm »
I second the motion of a toggle between Basic and Advanced Modes.  For example, there is a Mode menu in Spybot S&D which allows you to switch between "Default" (Basic) and Advanced modes.    
 
The "Advanced" option in TH 5 could be the "Classic" interface from TH4.
 
And I'd like to point out something that many developers forget, especially when they are trying to "simplify" the user interface:
 
Quote:
No new software is more intuitive than the program you already know.
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 1820
Re: TrojanHunter 5
« Reply #8 on: Feb 1st, 2006, 9:55pm »
Good point ! don't you just hate when something you need isn't there anymore Angry many a program has been thrown in the "bin" for that reason.
IP Logged
phantomdaz
Newbie
*



I love YaBB 1G - SP1!

   


Gender: male
 Posts: 3
Re: TrojanHunter 5
« Reply #9 on: Feb 4th, 2006, 8:06pm »
Personally
I would like to see TH be able to down load the new defs and perform a schedule a scan .  
 
My antivirus has the ability to make custom scans and download updates without any intervention from me. It does let me know that the scan happened and that I had no viruses
 
Thanks
IP Logged
tosbsas
Junior Member
**



Becky Internet Mail - Number 1

   
Email

Posts: 84
Re: TrojanHunter 5
« Reply #10 on: Feb 11th, 2006, 5:35pm »
I know I am a pain in the ".." but how about giving Th 5 the incremental updates I am asking for for such a long time (Smiley)
 
Ruben
IP Logged
dynamodave
Full Member
***



I love YaBB 1 Gold!

  hrlyrider48080  
Email

Posts: 148
Re: TrojanHunter 5
« Reply #11 on: Feb 11th, 2006, 6:09pm »
I would like to see a setting that would monitor new programs at  startup ...almost every trojan I`ve seen adds itsself to this
IP Logged
Chuck
Newbie
*





   


Gender: male
 Posts: 30
Re: TrojanHunter 5
« Reply #12 on: Feb 12th, 2006, 7:42am »
I second the incremental updates request.  Thanks!  CHUCK   Grin
IP Logged
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW   Email

Gender: male
 Posts: 2883
Re: TrojanHunter 5
« Reply #13 on: Feb 12th, 2006, 7:54am »
on Feb 11th, 2006, 6:09pm, dynamodave wrote:
I would like to see a setting that would monitor new programs at  startup ...almost every trojan I`ve seen adds itsself to this

That would duplicate a task usually covered by AntiSpyware apps such as MSAS, Spy Sweeper, Spyware Doctor, etc.  {MSAS, or Microsoft AntiSpyware, is free}.  TH does have an AutoStart Viewer but you are suggesting realtime monitoring.
IP Logged
dynamodave
Full Member
***



I love YaBB 1 Gold!

  hrlyrider48080  
Email

Posts: 148
Re: TrojanHunter 5
« Reply #14 on: Feb 13th, 2006, 8:39pm »
thats what I meant a real time monitor right now I use startup monitor  http://www.mlin.net/StartupMonitor.shtml simple small and nothing gets around it ..not even the latest viruses that rulesets and updates are not out for
IP Logged
Pages: 1 2 3    Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« No topic | Next topic »
Search
Members
Login
Register