Welcome, Guest. Please Login or Register.
Search
Members
Login
Register
   Mischel Internet Security Forum
   TrojanHunter
   Bugs (Moderators: Helena, Gavin_Coe, Magnus)
   [OPEN] Not logging "Executables with Double Extensions"		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: [OPEN] Not logging "Executables with Double Extensions"  (Read 631 times)
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 7358
[OPEN] Not logging "Executables with Double Extensions"
« on: Mar 11th, 2010, 3:21am »		 Quote Quote  Modify Modify
Windows 7 x64 and x86 Professional.
TH V5.3.994 Beta 2
 
When performing a Full Scan, TH V5.3.994 does not log (display) files with Double Extensions.  The option "Warn on executable files with double extensions" is check marked.  This is a new bug starting with V5.3.994 beta 2.
« Last Edit: Mar 11th, 2010, 5:36am by Magnus » IP Logged
______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
Re: [OPEN] Not logging "Executables with Double Extensions"
« Reply #1 on: Mar 11th, 2010, 5:36am »		 Quote Quote  Modify Modify
Looking at this now.
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
Re: [OPEN] Not logging "Executables with Double Extensions"
« Reply #2 on: Mar 11th, 2010, 6:56am »		 Quote Quote  Modify Modify
Tom, what is the actual extension of one of the files that duplicates this bug? .exe or something else?
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 7358
Re: [OPEN] Not logging "Executables with Double Extensions"
« Reply #3 on: Mar 12th, 2010, 12:18am »		 Quote Quote  Modify Modify
Below are the double extensions that V5.2.992 logs.  V5.3.994 logs none of these.  Most are .dll, but there are some .tmp as well.
 
Quote:
TrojanHunter Scan Report - Saved 2010-03-12 01:15
 
Warning: Executable file with double extensions found: C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll
Warning: Executable file with double extensions found: C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll
Warning: Executable file with double extensions found: C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll
Warning: Executable file with double extensions found: C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\Microsoft.Ink.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\Microsoft.Ink.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Common Files\microsoft shared\ink\Microsoft.Ink.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Microsoft Silverlight\3.0.50106.0\System.Net.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Microsoft Silverlight\3.0.50106.0\System.ServiceModel.Web.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Microsoft Silverlight\3.0.50106.0\System.Xml.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll
Warning: Executable file with double extensions found: C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll
Warning: Executable file with double extensions found: C:\Users\Tom Ray\AppData\Local\Microsoft\Outlook\~Outlook1.pst.tmp
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC\Microsoft.Ink\1.0.2201.0__31bf3856ad364e35\Micro soft.Ink.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC\Microsoft.Ink\1.7.2600.2180__31bf3856ad364e35\Mi crosoft.Ink.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71 e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_32\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\Micro soft.Ink.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b0 3f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_32\Policy.1.0.Microsoft.Ink\6.1.0.0__31bf3856ad3 64e35\Policy.1.0.Microsoft.Ink.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_32\Policy.1.7.Microsoft.Ink\6.1.0.0__31bf3856ad3 64e35\Policy.1.7.Microsoft.Ink.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_32\Policy.6.0.Microsoft.Ink\6.1.0.0__31bf3856ad3 64e35\Policy.6.0.Microsoft.Ink.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.W eb.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_64\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\Micro soft.Ink.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b0 3f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_64\Policy.6.0.Microsoft.Ink\6.1.0.0__31bf3856ad3 64e35\Policy.6.0.Microsoft.Ink.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_64\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.W eb.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Bml\6.1.0.0__31bf3856 ad364e35\Microsoft.MediaCenter.Bml.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.iTV\6.1.0.0__31bf3856 ad364e35\Microsoft.MediaCenter.iTV.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\Microsoft.Tpm\6.1.0.0__31bf3856ad364e35\Mic rosoft.Tpm.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f 11d50a3a\Microsoft.VisualBasic.Vsa.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Mic rosoft.Vsa.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\Sys tem.IO.Log.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System .Net.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad 364e35\System.ServiceModel.Web.dll
Warning: Executable file with double extensions found: C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System .XML.dll
Warning: Executable file with double extensions found: C:\Windows\ehome\Microsoft.MediaCenter.Bml.dll
Warning: Executable file with double extensions found: C:\Windows\ehome\Microsoft.MediaCenter.iTV.dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa. dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Microsoft.Vsa.dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Web.dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.XML.dll
Warning: Executable file with double extensions found: C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
IP Logged
______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 7358
Re: [OPEN] Not logging "Executables with Double Extensions"
« Reply #4 on: Mar 15th, 2010, 11:08am »		 Quote Quote  Modify Modify
This issue is not fixed in V5.3.994 final release.
IP Logged
______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »