Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Oct 12th, 2008, 12:12am
   Mischel Internet Security Forum
   Internet Security
   Software Updates (Moderators: Helena, Gavin_Coe, Magnus)
   ImmunizeNow v.1.4.5 available		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: ImmunizeNow v.1.4.5 available  (Read 559 times)
claire
Stole All the Forum Stars
********



carpe diem

   


Gender: female
 Posts: 3478
ImmunizeNow v.1.4.5 available
« on: Jan 23rd, 2007, 9:58am »		 Quote Quote  Modify Modify
ImmunizeNOW! v1.4.5  
 
* DOS screen for future updates will leave instantly after launching of the application; it’ll no longer wait for application to close first.  
* Includes 74 additional ActiveX.db Items [Total ActiveX.db Items: 4292]
 
 
http://www.mntolympus.org
IP Logged
Claire
Pierre
Newbie
*






   
WWW  

Gender: male
 Posts: 2
Re: ImmunizeNow v.1.4.5 available
« Reply #1 on: Apr 13th, 2007, 8:11pm »		 Quote Quote  Modify Modify
Hello Claire
 
As I was writing a paper about this product, I have made some searches on the Net and found this thread. I have made, before all, and as usual, an analyze using VirusTotal. What do you think of that? Is there something known about this?
 
It is too early to give an opinion but I think this analysis must lead to the suspension of any use of this product for the moment. False Positive ? Crapware ?
 

 
The same analyze against SpywareBlaster :
 

 
This requires fuller investigations. The two products use then same technologies (KillBit, Restricted zone, Cookies files names, Hosts)
 
Notice that SpywareBlaster does not have to remain running in the background but ImmunizeNOW! has an add-on : WebFlash-Control for disabling / enabling Flash. I did not test it but if it acts as an add-on this means that ImmunizeNOW! must stay running.
 
Remember that you can add entries into the original SpywareBlaster List if you think something is missing. A howto and an additional list here :
http://customblockinglist.cjb.net/
 
Sincerely
« Last Edit: Apr 13th, 2007, 8:12pm by Pierre » IP Logged
Pierre (aka Terdef)
Assiste.com - Asap
The crapware list
The Win XP services list
Security, privacy and Internet dirty tricks
Phant0m
Newbie
*





   


Posts: 5
Re: ImmunizeNow v.1.4.5 available
« Reply #2 on: Apr 14th, 2007, 7:45am »		 Quote Quote  Modify Modify
Hi Pierre
 
  At one point in time the VirusTotal had a much larger list, now it’s down to just the four, having e-mailed some AVs technical support I managed to have them re-investigate my product which leads to the removal of their detections for my product.
 
The basic reason for the detections at one point in time with the other AVs was due to the UPX compression used on my executable, I’ll assume this is still the case for the last four shown on that list.
 
 
Right; SpywareBlaster does not have to remain running in the background, same applies to ImmunizeNOW!. And you are right that there is a small add-on WebFlash-Control (which now needs to be downloaded separately) … for user conveniences to quickly disabling / enabling Flash from systray icon, also offers quick manual launching (from the systray icon) of the ImmunizeNOW! main application. And also ImmunizeNOW! isn’t an requirement to use just the WebFlash-Control add-on for the flash state toggling.
 
WebFlash-Control was originally part of the ImmunizeNOW! Install (or at user’s whim on install), at that time it also shared functions with automatic updating and the only information actually sent to the server was the login information (sent through URLDownloadToFile() API) to the restricted area at MntOlympus to retrieve ASCII .txt file used for updates.
 
Also I should mention the entire time many AVs had ‘SShield.exe’ (ImmunizeNOW! main application) file detected, SShield.exe didn’t have manual updater implemented, and no code used that would make this executable client or server ready. http://www.mntolympus.org/phpbb2/viewtopic.php?t=3675  
 
WebFlash-Control is now separate as I have mentioned previously, and has been stripped of automatic updating functionality; no connecting is possible through its usage… And now the ImmunizeNOW! main application (SShield.exe) has been updated to include manual updater, and should-Only been seen making a connection (and again, only is the URLDownloadToFile() API used here) to MntOlympus when visiting the ‘Update’ TAB…
 
 
Pierre; let’s cut through the BS, I have also done my research and I know you to be a webmaster of an popular French security site, and a big supporter of Javacool’s work (SpywareBlaster), and you are prone to cowardly criticize developers of similar software that deals with these types of threats…
 
How convenient it is for you (a great supporter of Javacool and his work Spywareblaster) to be dancing around different big popular security boards and using this to your advantage and get the message out to people to use Spywareblaster software only…
 
If you were any sort of writer, researcher you would have contacted the product official channels firstly and ask questions, I do not make it difficult to contact me… Having researched you it’s dead-on like you not to contact official channels firstly, and go cowardly dancing around criticizing me and my product while in attempt to slander my name and my product and at the same time recommend Javacool’s SpywareBlaster that you so indorse!
 
Obviously you don’t like variety, how sad it would be only one type of Anti-Virus software on the Internet, one type of HIPs and Firewall on the Internet, only one ISP provider in the world to connect us to Internet…  
 
 
Anyways enjoy your path to enlightenment ….
IP Logged
Pierre
Newbie
*






   
WWW  

Gender: male
 Posts: 2
Re: ImmunizeNow v.1.4.5 available
« Reply #3 on: Apr 14th, 2007, 4:51pm »		 Quote Quote  Modify Modify
Hi Phant0m,
 
First of all, I ask you to accept my excuses.
I would indeed have to contact you initially.
 
I remain objective at every moment.  I do not make the promotion of Javacool more than another (and I was writing a similar page for ImmunizeNOW! when the problem appeared – I was very surprised and disappointed). So, NO! I can not be “ prone to cowardly criticize developers of similar software that deals with these types of threats” and, after these explanations, I will complete my paper on ImmuniseNOW!, upload it and recommend your product. And I will pass the information on the 3 boards I asked for any knowledge of the problem.
 
I do not understand why UPX is of any problem with AntiVirus makers (the fact it has been heavily used by hackers ?). On an other side, why don’t you use 7zip to archive in .zip ImmunizeNOW! The problem would disappear instantly, no ?
 
Ok for WebFlash-Control that do not require ImminizeNOW! to run. Thanks for that precision.
 
Once again, I apologies and wish to meet you again (in others circumstances).
 
I will inform you when my page in French on ImmunizeNOW! will be on-line (I now have to finish the update of the PacMan Startup List).
 
Sincerely
IP Logged
Pierre (aka Terdef)
Assiste.com - Asap
The crapware list
The Win XP services list
Security, privacy and Internet dirty tricks
Phant0m
Newbie
*





   


Posts: 5
Re: ImmunizeNow v.1.4.5 available
« Reply #4 on: Apr 14th, 2007, 6:48pm »		 Quote Quote  Modify Modify
UPX tool is commonly used to pack Trojans and malicious programs; I guess this is still reason enough for some AV companies, and probably are the only ones that still don’t do or fully runtime unpacking and instead flag files for suspiciousness. - … This of course doesn’t mean that the four shown to detect here doesn’t do runtime unpacking, I don’t often do follow-ups on different AVs features.
 
Yes I could archive it, and no installation would even be required, but if and when I do use archive it’ll only be as an addition to the installer. And as foolish as it may seem too many, I’m not going to fold to these big AV companies when they decide to-do things wrongly, whether they decide to flag runtime packed files as suspicious … by giving unreal labelling and all because they simply to busy to add runtime unpacking systems to their products, or they giving out-of-this-world files labelling because of the amount of file submissions…
 
 
What was basically distasteful about this whole thing is that you hadn’t come to me firstly; you felt the need to post several different locations instead of contacting me through product official channels that is available, before hand… In any case I wipe myself off and start with a clean slit between us, also it’s good to be cautious and if I were in the very same position as you were I would be very concerned also; I just would have handled it differently…
 
 
The newer versions of ImmunizeNOW!, ImmunizeNOW! installer doesn’t bundle WebFlash-Control, you have to download separately if want. WebFlash-Control is just a simple small utility addition to provide user conveniences with Flash state toggling through its systray icon along with ImmunizeNOW! main application launching capability on user demand…
 
 
Any further concerns, questions, or suggestions, don’t hesitate to contact me, I do not mind answering and reading possible promising product suggestions…
 
 
 
Thanks,
Regards,
Phant0m``
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register