Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
May 16th, 2008, 4:55am
   Mischel Internet Security Forum
   TrojanHunter
   Beta Testing (Moderators: Helena, Gavin_Coe, Magnus)
   TrojanHunter 4.6 Beta 1		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: TrojanHunter 4.6 Beta 1  (Read 1256 times)
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4076
TrojanHunter 4.6 Beta 1
« on: Jul 8th, 2006, 10:44am »		 Quote Quote  Modify Modify
TrojanHunter 4.6 Beta 1 is available for testing. This is just the scanner executable - download it and replace your existing TrojanHunter.exe:
 
  http://www.misec.net/beta/TrojanHunter.exe
 
Big new feature to test: Quarantine
 
When TrojanHunter finds a trojan file it will quarantine it to a special quarantine folder instead of just renaming it. The quarantined files are strongly encrypted with AES to make them completely impossible to execute and to prevent other security programs from identifying them.
 
You can view the quarantine from the scanner by clicking the "Quarantine" button. Quarantined files can easily be restored or permanently removed from this interface.
 
I suggest you use Trojan Simulator (http://www.misec.net/trojansimulator/) to test the new quarantine feature.
 
As always, report any and all problems, bugs etc. in this thread.
IP Logged
wilpower
Junior Member
**





   


Posts: 58
Re: TrojanHunter 4.6 Beta 1
« Reply #1 on: Jul 8th, 2006, 11:39am »		 Quote Quote  Modify Modify
Hi Magnus: I have 1 day left on 'Trial' version.
What will happen if I download TH 4.6 beta1. Is the link only available by invitation or registration? Cool
IP Logged
Use of COMODO Internet Security products is not only advised; use is "Highly Recommended"

http://Comodo.com

LIVE LIKE YOU MEAN IT! THINK LIKE YOU CARE!
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4076
Re: TrojanHunter 4.6 Beta 1
« Reply #2 on: Jul 8th, 2006, 11:45am »		 Quote Quote  Modify Modify
The new 4.6 should work fine provided you still have time left on the trial.
IP Logged
Matt_Day
Senior Member
****




Apparently I love YaBB 1G - SP1!

   


Gender: male
 Posts: 317
Re: TrojanHunter 4.6 Beta 1
« Reply #3 on: Jul 8th, 2006, 1:58pm »		 Quote Quote  Modify Modify
Looks very good Magnus, all seemed to work as intended here for me.
 
However, there is one minor thing I will point out.  I think it would be better to have the original filename in the left hand column next to the checkbox, rather than the quarantine name.  I had to look twice next to the checkbox as instinctively and intuitively I expected to see TSServ.exe there rather than the .dat file.
 
Probably me just being picky though Roll Eyes
 
Good work, definately an excellent feature.
IP Logged
Matt Day
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5270
Re: TrojanHunter 4.6 Beta 1
« Reply #4 on: Jul 8th, 2006, 6:42pm »		 Quote Quote  Modify Modify
Worked very neatly.  Thus far have not found any problems.  Looking forward to trying it with THGuard V4.6.   Wink
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5270
Re: TrojanHunter 4.6 Beta 1
« Reply #5 on: Jul 9th, 2006, 2:34am »		 Quote Quote  Modify Modify
1.  Why does it find 3 trojans when scanning TSSERV.exe?  Is there an extraction occurring?
 
Quote:
Scanning A:\TrojanSimulator\TSServ.exe
Found trojan file: A:\TrojanSimulator\TSServ.exe/F1ZiMX.exe (TrojanSimulator.100)
Found trojan file: A:\TrojanSimulator\TSServ.exe/F1ZiMX.exe (Trojan Simulator)
Found trojan file: A:\TrojanSimulator\TSServ.exe (TrojanSimulator.100)

 
 
This yields 2 "File not found" messages in response to the second two trojans found.
 
Quote:

Quarantined file A:\TrojanSimulator\TSServ.exe
 
File not found: A:\TrojanSimulator\TSServ.exe
 
File not found: A:\TrojanSimulator\TSServ.exe
Trojan cleaning finished.

 
2.  When using Plugin "Advanced File Checker" under Plugins, it does not report anything when scanning TSSERV.EXE.
 
3.  Suggested further enhancement for V4.6 and above.
 
a.  In the top menu of TH scanner, add a "Save Scan Report" icon (as is provided under the File menu).
 
b.  Provide an option under OPTIONS-Report Options that allows for always automatically saving the scan log into a new folder "LOGS" in C:\Program Files\TrojanHunter 4.x.  Use the date or something like it to automatically label the saved log.  This of course leads to the need for a "Display log" and "Delete log" feature.   Smiley
 
c.  Provide a "Pause scan" button next to the "Stop" button for scanning.
 
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 1820
Re: TrojanHunter 4.6 Beta 1
« Reply #6 on: Jul 9th, 2006, 4:13am »		 Quote Quote  Modify Modify
The multiple alerts I can see as this:
 
1st alert, decompresses file and detects by signature
2nd alert, also detects TrojanSimulator with generic
3rd alert might be a redundant signature
 
Best to just filter these out at the cleaning stage and ignore any duplicates.
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5270
Re: TrojanHunter 4.6 Beta 1
« Reply #7 on: Jul 9th, 2006, 5:16am »		 Quote Quote  Modify Modify
Thanks Gavin for the feedback....much appreciated.
 
Quote:
2.  When using Plugin "Advanced File Checker" under Plugins, it does not report anything when scanning TSSERV.EXE.

 
Any idea as to why the Advanced File Checker plugin does not detect anything?  Or am I sitting in the cockpit backwards this morning when using this plugin.... Grin
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 1820
Re: TrojanHunter 4.6 Beta 1
« Reply #8 on: Jul 9th, 2006, 7:19pm »		 Quote Quote  Modify Modify
Doesn't look like that plugin is calling the scan functions correctly Wink nice find.
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 1820
Re: TrojanHunter 4.6 Beta 1
« Reply #9 on: Jul 9th, 2006, 7:33pm »		 Quote Quote  Modify Modify
Same goes for the generic scan
IP Logged
Chuck
Newbie
*





   


Gender: male
 Posts: 30
Re: TrojanHunter 4.6 Beta 1
« Reply #10 on: Aug 26th, 2006, 8:19am »		 Quote Quote  Modify Modify
It's been a while with no word on the status of 4.6 Beta 1 or 5.0.  How are things going and any idea when the next version will be ready or Beta 2 will be released?  Thanks!   Grin
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5270
Re: TrojanHunter 4.6 Beta 1
« Reply #11 on: Aug 26th, 2006, 11:29pm »		 Quote Quote  Modify Modify
I haven't seen Magnus on the forum lately...so something must be getting close .  Wink
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register