Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Sep 6th, 2008, 11:04pm
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Guard (Moderators: Helena, Gavin_Coe, Magnus)
   Meaning of "Process Rules"		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Meaning of "Process Rules"  (Read 437 times)
Beelzebub
Newbie
*





   


Posts: 34
Meaning of "Process Rules"
« on: Apr 13th, 2006, 1:32am »		 Quote Quote  Modify Modify
Sorry to ask a simple-minded question, but I would like to know, and...  I don't!
 
The TrojanHunter Scanner says it contains some 59,621 ruleset entries (as of April 12, 2006, anyway).  The TrojanHunter Guard currently says "Loaded process rules: 4552".
 
What is meant by "process rules"?  My assumption is that the "4552" figure refers to TH Guard scanning process memory for 4552 malware definitions, whereas the 59,621 figure refers to how many definitions the TH scanner can apply to disk-based scans.
 
Am I right?
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 1990
Re: Meaning of "Process Rules"
« Reply #1 on: Apr 13th, 2006, 11:29am »		 Quote Quote  Modify Modify
Yes process rules are memory rules. The memory scanner detects quite a number of variants for each rule, sometimes it does surprisingly well and detects a completely different variant as something else Grin
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register