Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Dec 3rd, 2008, 2:51pm
   Mischel Internet Security Forum
   Other
   Suggestion Box
(Moderators: Helena, Gavin_Coe, Magnus)
   A change to the 'THGuard report' window
« Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: A change to the 'THGuard report' window  (Read 518 times)
Ian
Stole All the Forum Stars
********



Good things come to those who wait ...

   


Posts: 2913
A change to the 'THGuard report' window
« on: Aug 27th, 2002, 2:12pm »
Quote Quote  Modify Modify

Hi Magnus,
 
Just had the pleasure of seeing TH Guard in action - after downloading and trying to install RegXplor from http://www.regxplor.com/ - both versions (with and without MFC) triggered the warning (the only one that doesn't is the .DLL-only version - obviously, since it's not an .exe file...).
 
Now, is TH getting this one right? Users over at SecureComp who have installed this util didn't get a squeek from their AV/AT systems. It's probably just TH being better than the rest (again), but is there any chance you could check this? The program needs to be run to trigger THG, so d/l'ing it seems OK, (no further warnings were given on a full file scan here on my PC).
 
One comment over in SecureComp was 'how sure was I that the program caused the report?' Well, apart from retesting the suspect, and the fact that THG renames and re-icons the file, how about having the file name stated in the 'Trojan found' box, as well as the Trojan it found?
IP Logged

... but crap arrives pretty much straight away.
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4121
Re: A change to the 'THGuard report' window
« Reply #1 on: Aug 29th, 2002, 11:40pm »
Quote Quote  Modify Modify

Hi Ian,
 
Sounds like this could be a false positive. I'm going to have to take a closer look at the signatures to see why TrojanHunter is detecting this file. Unfortunately I'm *really* busy right now, but I expect to be able to get back to you tomorrow on this.
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register