Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Dec 3rd, 2008, 6:24pm
   Mischel Internet Security Forum
   TrojanHunter
   Ruleset Updates (Moderators: Helena, Gavin_Coe, Magnus)
   TrojanHunter 5.0 Ruleset Update - Jun 3, 2008		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008  (Read 536 times)
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Gender: male
 Posts: 2115
TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« on: Jun 3rd, 2008, 9:38pm »		 Quote Quote  Modify Modify
An updated TrojanHunter ruleset is available. This update adds 34 new trojan definitions:
 
TrojanDownloader.Agent.2323
TrojanDownloader.Agent.2322
TrojanDownloader.BHO.126
TrojanDownloader.Delf.1371
TrojanDownloader.Exchanger.106
TrojanDownloader.FraudLoad.168
TrojanDownloader.FraudLoad.167
TrojanDownloader.FraudLoad.166
TrojanDownloader.Homles.105
TrojanDownloader.Injecter.137
TrojanDownloader.Injecter.136
TrojanDownloader.Mutant.135
TrojanDownloader.Mutant.134
TrojanDownloader.Tibs.229
TrojanDownloader.Winlagons.141
TrojanDownloader.Winlagons.140
TrojanDownloader.Winlagons.139
TrojanDownloader.Winlagons.138
TrojanDownloader.Winlagons.137
TrojanDownloader.Winlagons.136
TrojanDownloader.Winlagons.135
TrojanDownloader.Zlob.1467
TrojanProxy.Small.245
TrojanSpy.Zbot.266
Vundo.1135
Vundo.1134
Vundo.1133
Vundo.1132
Vundo.1131
Worm.Agent.163
Worm.Socks.133
Worm.Socks.132
Worm.Zhelatin.518
Worm.Zhelatin.517
 
Licensed TrojanHunter users can easily update using TrojanHunter's LiveUpdate utility. If you are using the trial version of TrojanHunter, please see http://www.misec.net/trojanhunter/updating/ for instructions on how to update to the latest ruleset.
 
You should have 174184 rules.
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Gender: male
 Posts: 2115
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #1 on: Jun 3rd, 2008, 11:25pm »		 Quote Quote  Modify Modify
174289 for LiveUpdate only
 
This update adds 49 new trojan definitions:
 
TrojanDownloader.Agent.2329
TrojanDownloader.Agent.2328
TrojanDownloader.Agent.2327
TrojanDownloader.Agent.2326
TrojanDownloader.Agent.2325
TrojanDownloader.Agent.2324
TrojanDownloader.Banload.1418
TrojanDownloader.Banload.1417
TrojanDownloader.Banload.1416
TrojanDownloader.ConHook.188
TrojanDownloader.Dadobra.185
TrojanDownloader.Delf.1372
TrojanDownloader.FraudLoad.170
TrojanDownloader.FraudLoad.169
TrojanDownloader.Mutant.136
TrojanDownloader.Small.2587
TrojanDownloader.Small.2586
TrojanDownloader.Small.2585
TrojanDownloader.Tibs.230
TrojanDownloader.Winlagons.153
TrojanDownloader.Winlagons.152
TrojanDownloader.Winlagons.151
TrojanDownloader.Winlagons.150
TrojanDownloader.Winlagons.149
TrojanDownloader.Winlagons.148
TrojanDownloader.Winlagons.147
TrojanDownloader.Winlagons.146
TrojanDownloader.Winlagons.145
TrojanDownloader.Winlagons.144
TrojanDownloader.Winlagons.143
TrojanDownloader.Winlagons.142
TrojanDownloader.Zlob.1468
TrojanDropper.Agent.883
TrojanDropper.Agent.882
TrojanDropper.Agent.881
TrojanDropper.Agent.880
TrojanDropper.Small.517
TrojanProxy.Saturn.120
TrojanSpy.Agent.461
TrojanSpy.Agent.460
TrojanSpy.Banker.2319
TrojanSpy.Banpaes.134
TrojanSpy.Zbot.267
VB.1220
WinFixer.187
Worm.Agent.164
Worm.Socks.134
Worm.VB.207
Worm.Zhelatin.519
IP Logged
Jrb
Full Member
***



I love YaBB 1G - SP1!

   


Posts: 221
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #2 on: Jun 4th, 2008, 1:42am »		 Quote Quote  Modify Modify
Thanks Gavin !
 
But the exact same problem as I described at the DSLR security forum is back again:
http://www.dslreports.com/forum/r20575769-Trojan-Hunter-forum-down-stran ge-update
 
The problem is that, using the US server, the files THGuard.exe and TrojanHunter.exe are being reverted back to an older one.
Maybe I should start a new thread about it here at the TH-forum, but at the moment the TH-forum is still slow.
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5817
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #3 on: Jun 4th, 2008, 2:37am »		 Quote Quote  Modify Modify
Yes, the forum and also LiveUpdate from the USA server is slow.  I feel confident that Magnus and The Planet are working on this.  I suspect things are still in a bit of a shambles at The Planet.  
 
As I stated over at the DSL forum, I am not seeing any changes to THGuard or TrojanHunter on either my XP-SP3 or Vista SP1 computer.  I haven't been switching back and forth between the European and USA server during all this.  I'm wondering if you have been which may the root cause of the problem.  Something does appear to be out of synch between the two servers.  
 
Would you mind re-installing TH.  But stay specifically on the USA server and see if the problem still occurs.
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
newyorkjet
Newbie
*





   


Posts: 9
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #4 on: Jun 4th, 2008, 2:55am »		 Quote Quote  Modify Modify
I've got the same problem as Jrb - old THGuard.exe  and TrojanHunter.exe.I did switch between servers to see if things might improve.My install file is also old (2007), so no point in reinstalling from backup.As the download is so slow currently should I wait for Magnus and Gavin to sort something out by normal updates?  
 
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5817
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #5 on: Jun 4th, 2008, 3:56am »		 Quote Quote  Modify Modify
Yeah, wait until Magnus steps in and figures out what is happening.
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Gandalf
Junior Member
**



Love, Light & Peace

   


Gender: male
 Posts: 67
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #6 on: Jun 4th, 2008, 1:04pm »		 Quote Quote  Modify Modify
I, too, have been following the thread over at the DSL forum concerning the old THGuard and TH executables. I use the European server and did not switch between the US and Europe servers. My THGuard and TH exes are showing as the older versions and since 30 May, the Europe server has said I have the latest update installed and does not show the update for 3 June. XP-Pro SP3. I have only just found the ruleset update post on here for 3 June.
 
Forgot to add: THGuard.exe 5.0.0.277 Size: 1046688
      TrojanHunter.exe 5.0.0.962 Size: 2417824
Just forced LU to re-update from European server and versions still the same and showing 30 May as the last and latest update.
 
G.
« Last Edit: Jun 4th, 2008, 1:45pm by Gandalf » IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5817
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #7 on: Jun 4th, 2008, 3:40pm »		 Quote Quote  Modify Modify
I've e-mailed Magnus again on this issue.  I'm not sure if he is able to get e-mails, but two have been sent to him concerning this.  Sorry for the delay..
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
BCAM
Newbie
*





   


Posts: 2
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #8 on: Jun 4th, 2008, 3:50pm »		 Quote Quote  Modify Modify
I've tried over the past several days to download the rules updates for my trial version.  There is always the error: "Page Not Found" for http://www2.misec.net/rulefiles/zip/Update.zip. Somebody needs to fix the link!
IP Logged
Jrb
Full Member
***



I love YaBB 1G - SP1!

   


Posts: 221
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #9 on: Jun 4th, 2008, 4:55pm »		 Quote Quote  Modify Modify
- Cross-posted at DSLR and TH forum -
 
OK, I have re-installed TH again and now it is fine Smiley
 
My system: XP-home SP2 Dutch.
 
The install-file I used for the first and second re-installation is
exactly the same as the one that can now be downloaded from the TH-site.
The file TrojanHunterSetup.exe has the following Checksum(s)
MD5 - 04833D6C9BC8E49CF264F191CBC32DC2
 
What I did different comparing my first and second re-install:
1.
On the second re-install:
After de-install I manually removed the whole TH-folder.
And then I rebooted.
And then I did the re-install.
(I should have done this also with my first re-install).
2.
I only used the US server to get the latest defs;
I didn't use the EU server this time.
 
My files THGuard.exe and TrojanHunter.exe are what they should be,
and are the same as siliconman posted:
 
The file C:\Program Files\TrojanHunter 5.0\THGuard.exe has the following Checksum(s)
MD5 - E3A386AFBE97F4D2919395E5D3FCC7A5
Version: 5.0.0.278
Size: 1047712
 
 
The file C:\Program Files\TrojanHunter 5.0\TrojanHunter.exe has the following Checksum(s)
MD5 - 0EA94DE726F604D7B85C48CEB6E3B6E1
Version: 5.0.0.962
Size: 2418336
 
The defs my TH is showing:
Ruleset datestamp    : 2008-06-03
Scan kernel     : 5.0 (Aurelius)
Ruleset entries      : 174289
Trojan definitions   : 66752
Detection rules      : 174289
IP Logged
Gandalf
Junior Member
**



Love, Light & Peace

   


Gender: male
 Posts: 67
Re: TrojanHunter 5.0 Ruleset Update - Jun 3, 2008
« Reply #10 on: Jun 5th, 2008, 5:03am »		 Quote Quote  Modify Modify
Resolved: I performed a clean uninstall and reinstall of fresh THsetup file. Checked file versions before and after updating to latest def file: 5 June containing 174608 ruleset entries from the USA server. Will stay with the USA server for the present.
My files THGuard.exe and TrojanHunter.exe are what they should be.
 
The file C:\Program Files\TrojanHunter 5.0\THGuard.exe has the following Checksum(s)
MD5 - E3A386AFBE97F4D2919395E5D3FCC7A5
Version: 5.0.0.278
Size: 1047712
 
The file C:\Program Files\TrojanHunter 5.0\TrojanHunter.exe has the following Checksum(s)
MD5 - 0EA94DE726F604D7B85C48CEB6E3B6E1
Version: 5.0.0.962
Size: 2418336
 
Just needs a fresh re-install then it seems.
 
 
 
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register