TrojanHunter 4.6 Beta 1 - Mischel Internet Security Forum

Jobs | About | Blog | Contact

Download TrojanHunter Now
Free 30-day trial!

Latest TrojanHunter Version:
TrojanHunter 5.2

Order Now
License file delivered within minutes.

Welcome, Guest. Please Login or Register.

Mar 11^th, 2010, 9:52am

   Mischel Internet Security Forum
   TrojanHunter
   Beta Testing (Moderators: Helena, Gavin_Coe, Magnus)
   TrojanHunter 4.6 Beta 1

« Previous topic | Next topic »

Pages: 1

Notify of replies

Send Topic

Author

Topic: TrojanHunter 4.6 Beta 1 (Read 1991 times)

Magnus
Administrator

Ad astra per aspera.

Posts: 4317

TrojanHunter 4.6 Beta 1
« on: Jul 8^th, 2006, 10:44am »

Quote

Modify

TrojanHunter 4.6 Beta 1 is available for testing. This is just the scanner executable - download it and replace your existing TrojanHunter.exe:

http://www.misec.net/beta/TrojanHunter.exe

Big new feature to test: Quarantine

When TrojanHunter finds a trojan file it will quarantine it to a special quarantine folder instead of just renaming it. The quarantined files are strongly encrypted with AES to make them completely impossible to execute and to prevent other security programs from identifying them.

You can view the quarantine from the scanner by clicking the "Quarantine" button. Quarantined files can easily be restored or permanently removed from this interface.

I suggest you use Trojan Simulator (http://www.misec.net/trojansimulator/) to test the new quarantine feature.

As always, report any and all problems, bugs etc. in this thread.

IP Logged

Follow me on Twitter: http://twitter.com/mmischel

wilpower
Junior Member

Posts: 67

Re: TrojanHunter 4.6 Beta 1
« Reply #1 on: Jul 8^th, 2006, 11:39am »

Quote

Modify

Hi Magnus: I have 1 day left on 'Trial' version.
What will happen if I download TH 4.6 beta1. Is the link only available by invitation or registration? Cool

IP Logged

Use of COMODO Internet Security products is not only advised; use is "Highly Recommended"

http://Comodo.com

LIVE LIKE YOU MEAN IT! THINK LIKE YOU CARE!

Magnus
Administrator

Ad astra per aspera.

Posts: 4317

Re: TrojanHunter 4.6 Beta 1
« Reply #2 on: Jul 8^th, 2006, 11:45am »

Quote

Modify

The new 4.6 should work fine provided you still have time left on the trial.

IP Logged

Follow me on Twitter: http://twitter.com/mmischel

Matt_Day
Senior Member

Apparently I love YaBB 1G - SP1!

Gender: male

Posts: 318

Re: TrojanHunter 4.6 Beta 1
« Reply #3 on: Jul 8^th, 2006, 1:58pm »

Quote

Modify

Looks very good Magnus, all seemed to work as intended here for me.

However, there is one minor thing I will point out. I think it would be better to have the original filename in the left hand column next to the checkbox, rather than the quarantine name. I had to look twice next to the checkbox as instinctively and intuitively I expected to see TSServ.exe there rather than the .dat file.

Probably me just being picky though Roll Eyes

Good work, definately an excellent feature.

IP Logged

Matt Day

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 6589

Re: TrojanHunter 4.6 Beta 1
« Reply #4 on: Jul 8^th, 2006, 6:42pm »

Quote

Modify

Worked very neatly. Thus far have not found any problems. Looking forward to trying it with THGuard V4.6. Wink

IP Logged

______
TrojanHunter V5.2.992...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound w/ XM satellite, Avira Premium Security Suite V9; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD Raptors, NIS 2010. Common: router, cable modem, PerfectDisk 11 Pro, Casper Backup V6.0, DisplayFusion, SpywareBlaster V4.2, HostsMan V3.2.73, CCleaner, TrojanHunter V5.2.992, etc.

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 6589

Re: TrojanHunter 4.6 Beta 1
« Reply #5 on: Jul 9^th, 2006, 2:34am »

Quote

Modify

1. Why does it find 3 trojans when scanning TSSERV.exe? Is there an extraction occurring?

Quote:

Scanning A:\TrojanSimulator\TSServ.exe
Found trojan file: A:\TrojanSimulator\TSServ.exe/F1ZiMX.exe (TrojanSimulator.100)
Found trojan file: A:\TrojanSimulator\TSServ.exe/F1ZiMX.exe (Trojan Simulator)
Found trojan file: A:\TrojanSimulator\TSServ.exe (TrojanSimulator.100)

This yields 2 "File not found" messages in response to the second two trojans found.

Quote:

Quarantined file A:\TrojanSimulator\TSServ.exe

File not found: A:\TrojanSimulator\TSServ.exe

File not found: A:\TrojanSimulator\TSServ.exe
Trojan cleaning finished.

2. When using Plugin "Advanced File Checker" under Plugins, it does not report anything when scanning TSSERV.EXE.

3. Suggested further enhancement for V4.6 and above.

a. In the top menu of TH scanner, add a "Save Scan Report" icon (as is provided under the File menu).

b. Provide an option under OPTIONS-Report Options that allows for always automatically saving the scan log into a new folder "LOGS" in C:\Program Files\TrojanHunter 4.x. Use the date or something like it to automatically label the saved log. This of course leads to the need for a "Display log" and "Delete log" feature.

c. Provide a "Pause scan" button next to the "Stop" button for scanning.

IP Logged

Gavin_Coe
Trojan Analyst

Gender:

Posts: 2710

Re: TrojanHunter 4.6 Beta 1
« Reply #6 on: Jul 9^th, 2006, 4:13am »

Quote

Modify

The multiple alerts I can see as this:

1st alert, decompresses file and detects by signature
2nd alert, also detects TrojanSimulator with generic
3rd alert might be a redundant signature

Best to just filter these out at the cleaning stage and ignore any duplicates.

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 6589

Re: TrojanHunter 4.6 Beta 1
« Reply #7 on: Jul 9^th, 2006, 5:16am »

Quote

Modify

Thanks Gavin for the feedback....much appreciated.

Quote:

2. When using Plugin "Advanced File Checker" under Plugins, it does not report anything when scanning TSSERV.EXE.

Any idea as to why the Advanced File Checker plugin does not detect anything? Or am I sitting in the cockpit backwards this morning when using this plugin.... Grin

IP Logged

Gavin_Coe
Trojan Analyst

Gender:

Posts: 2710

Re: TrojanHunter 4.6 Beta 1
« Reply #8 on: Jul 9^th, 2006, 7:19pm »

Quote

Modify

Doesn't look like that plugin is calling the scan functions correctly Wink

nice find.

IP Logged

Gavin_Coe
Trojan Analyst

Gender:

Posts: 2710

Re: TrojanHunter 4.6 Beta 1
« Reply #9 on: Jul 9^th, 2006, 7:33pm »

Quote

Modify

Same goes for the generic scan

IP Logged

Chuck
Newbie

Gender:

Posts: 30

Re: TrojanHunter 4.6 Beta 1
« Reply #10 on: Aug 26^th, 2006, 8:19am »

Quote

Modify

It's been a while with no word on the status of 4.6 Beta 1 or 5.0. How are things going and any idea when the next version will be ready or Beta 2 will be released? Thanks! Grin

IP Logged