Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Oct 13th, 2008, 9:27pm
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Guard (Moderators: Helena, Gavin_Coe, Magnus)
   Warning for Outpost Pro 3.x users		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Warning for Outpost Pro 3.x users  (Read 587 times)
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 2044
Warning for Outpost Pro 3.x users
« on: Mar 23rd, 2006, 10:48pm »		 Quote Quote  Modify Modify
Hi all,
 
Just a quick warning. Component control in Outpost doesn't like THGuard at all. Crashes in processes is the end result.
 
If you use Outpost, BEFORE clicking "prevent unauthorised shutdowns" in the guard, ensure you have done the following.
 
a) In component control (under APPLICATION), remove any versions of THGuard that were previously allowed, including any older versions of 4.5 !
 
There seems to be no allowance by Outpost if the checksum of an application in here changes - if your listed program is changed, it will stop being allowed. In THGuard's case, it will cause crashes in proceses again despite seemingly being allowed. It MUST be removed and re-added. This is being reported to Agnitum now..
 
b) Now add THGuard.exe to the allow list, so that it is definitely going to allow it to modify memory. Done Smiley
IP Logged
PhilGreg
Newbie
*





   


Posts: 11
Re: Warning for Outpost Pro 3.x users
« Reply #1 on: Apr 9th, 2006, 9:33pm »		 Quote Quote  Modify Modify
Beta Tester for Anitum's OP.  
 
I doubt that's an OP bug per se. Should be automatic rule of thumb to delete permission for older versions of anything that wants to go online before upgrading to a newer version, That's what I always do and never have any prob.  
I'm willing to bet this is true w/other FWs as well. Then again I could be wrong.
IP Logged
Of all the things I've lost,
I miss my mind the most.

PhilGreg
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 2044
Re: Warning for Outpost Pro 3.x users
« Reply #2 on: Apr 9th, 2006, 9:48pm »		 Quote Quote  Modify Modify
Blocking something which can cause every process to crash is something you must ask about.. and indeed the firewall WORKS sometimes. I got their debug plugin and then the alert comes up blocked rather than crashing.. very strange Grin but anyway they are working on it Smiley
IP Logged
PhilGreg
Newbie
*





   


Posts: 11
Re: Warning for Outpost Pro 3.x users
« Reply #3 on: Apr 9th, 2006, 10:02pm »		 Quote Quote  Modify Modify
I'm not having any problems w/Component Control. Each time TH is started Component Control notifies me which is what its supposed to do because, I assume, TH is changes its name each time it's started.
 
I will admit that Component Control is a PIA but I have to use it for testing. I Suggest you turn it off and see what the results for TH are.
IP Logged
Of all the things I've lost,
I miss my mind the most.

PhilGreg
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 2044
Re: Warning for Outpost Pro 3.x users
« Reply #4 on: Apr 11th, 2006, 10:55pm »		 Quote Quote  Modify Modify
No it works fine when THGuard is excluded Wink
 
The problem is checksum changes when you install a new version of TH. Expecting a reply from their developers soon on exactly what's going on.
 
THGuard doesn't change itself or anything like that, it uses THSEC.DLL in all processes to protect itself.
 
Once you exclude it there will be no alert. In TH 4.5 the self protection is off by default, so if you enable this option and then updated to a new version TH you would get this issue. That's why I'm the first to notice it, during beta testing Wink
IP Logged
PhilGreg
Newbie
*





   


Posts: 11
Re: Warning for Outpost Pro 3.x users
« Reply #5 on: Apr 12th, 2006, 7:31am »		 Quote Quote  Modify Modify
on Apr 11th, 2006, 10:55pm, Gavin_Coe wrote:
No it works fine when THGuard is excluded Wink
 
The problem is checksum changes when you install a new version of TH. Expecting a reply from their developers soon on exactly http://www.misec.net/buy/what's going on.
 
THGuard doesn't change itself or anything like that, it uses THSEC.DLL in all processes to protect itself.
 
Once you exclude it there will be no alert. In TH 4.5 the self protection is off by default, so if you enable this option and then updated to a new version TH you would get this issue. That's why I'm the first to notice it, during beta testing Wink

 
I don't have TH excluded and when I upgraded to 4.5 I had no probs there either. Keep in mind I'm using the OP Beta so my results may be different than yours, however' I've been using TH for a couple of years and have been Beta testin OP for even longer and I never saw the problem you're having
 
IP Logged
Of all the things I've lost,
I miss my mind the most.

PhilGreg
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register