Welcome, Guest. Please Login or Register.
Search
Members
Login
Register
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   TrojanHunter 4.6 Released		 « Previous topic | Next topic »
Pages: 1 2 3  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: TrojanHunter 4.6 Released  (Read 29671 times)
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4525
TrojanHunter 4.6 Released
« on: Sep 4th, 2006, 12:49pm »		 Quote Quote  Modify Modify
TrojanHunter 4.6 has been released.  
 
This release features the brand new Quarantine for malware. Any cleaned trojan files are now placed in the quarantine. Files placed here are strongly encrypted with AES, and impossible to execute. Files placed here can be preserved for further examination, restored to their original location, or permanently removed.
 
Download:  
 
  http://www.misec.net/products/TrojanHunterSetup.exe
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
claire
Stole All the Forum Stars
********



carpe diem

   


Gender: female
 Posts: 3588
Re: TrojanHunter 4.6 Released
« Reply #1 on: Sep 4th, 2006, 1:22pm »		 Quote Quote  Modify Modify
Hi Magnus,
 
May we simply  download and install it on top of  our current version(TH4.5)?
 
Have a great day
IP Logged
Claire
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4525
Re: TrojanHunter 4.6 Released
« Reply #2 on: Sep 4th, 2006, 1:23pm »		 Quote Quote  Modify Modify
Hi,
 
Install into a new folder (as the installer recommends). You can then delete the old 4.5 folder after you restart the computer next time.
« Last Edit: Sep 4th, 2006, 1:26pm by Magnus » IP Logged
Follow me on Twitter: http://twitter.com/mmischel
claire
Stole All the Forum Stars
********



carpe diem

   


Gender: female
 Posts: 3588
Re: TrojanHunter 4.6 Released
« Reply #3 on: Sep 4th, 2006, 1:26pm »		 Quote Quote  Modify Modify
Many thanks for you super fast answer Smiley
IP Logged
Claire
NICK_ADSL_UK
Senior Member
****






   
WWW  

Gender: male
 Posts: 329
Re: TrojanHunter 4.6 Released
« Reply #4 on: Sep 4th, 2006, 5:41pm »		 Quote Quote  Modify Modify
Thanks magnus  Smiley
 
Posted to  
 
Major geeks  
   
SpyWare BeWare!  
   
SWI Forums    
 
MICKEY THEMAN PRIVACY & SECURITY FORUMS    
   
Gladiator Security Forum    
 
Wilders security  
     
CastleCops    
   
Windows forum  
 
Microsoft windows xp forum  
IP Logged

Wilders Security Forum Admin
Microsoft MVP - Consumer Security
hayc59
Original Gangster
******




VoodØØ Child™

   
WWW  

Gender: male
 Posts: 1487
Re: TrojanHunter 4.6 Released
« Reply #5 on: Sep 4th, 2006, 6:30pm »		 Quote Quote  Modify Modify
Posted where Nick has not gotten!!
Magnus anyway to see a change log? thanks
IP Logged
DEE
Newbie
*





   


Posts: 5
Re: TrojanHunter 4.6 Released
« Reply #6 on: Sep 5th, 2006, 2:16am »		 Quote Quote  Modify Modify
Was there a file change, anyone? I picked one heck of a day to switch over to Agnitum Outpost..
I keep getting told that this has dll been changed.- THSec.dll
 
Is that right?
 
Because I got nailed with some adware at about the same time.
slghex.dll.tcf  Adware.SpywareStorm  
 
ewido got it, but it has reinstalled..Exhausted right now, will reboot in the morning, & see if it's still here. I don't see it in the ruleset entries for TrojanHunter.
 
Thanks in advance for any and all help. Smiley
« Last Edit: Sep 5th, 2006, 2:16am by DEE » IP Logged
Brian49
Junior Member
**





   


Posts: 71
Re: TrojanHunter 4.6 Released
« Reply #7 on: Sep 5th, 2006, 7:57am »		 Quote Quote  Modify Modify
on Sep 4th, 2006, 1:23pm, Magnus wrote:
Hi,
 
Install into a new folder (as the installer recommends). You can then delete the old 4.5 folder after you restart the computer next time.

What's the reason for this, please?
« Last Edit: Sep 5th, 2006, 7:57am by Brian49 » IP Logged
Jrb
 Guest
Re: TrojanHunter 4.6 Released
« Reply #8 on: Sep 5th, 2006, 8:27am »		 Quote Quote  Modify Modify   Remove Remove
DEE wröte:
 
Quote:

Was there a file change, anyone? I picked one heck of a day to switch over to Agnitum Outpost..  
I keep getting told that this has dll been changed.- THSec.dll  

 
Hi DEE,
 
The file THSec.dll itself was not changed, but the location was changed (assuming that you follow the advice from Magnus to install the new TrojanHunter in a new folder).
 
Here is the report from my file-integrity-checker NISFileCheck with respect to the file THSec.dll
 
1.
Application: c:\program files\trojanhunter 4.5\thsec.dll
Status:  Changed: (Deleted, File not found error)
Version old: N/A
Size old: 102912
Date old: 2006-03-23  14:55:00
RMD160 Hash old: 4C65242798C260AD2403EF25BB85ED2E8172EEB5
 
2.
Application: c:\program files\trojanhunter 4.6\thsec.dll
Status:  New added
Version old: N/A
Size old: 102912
Date old: 2006-03-23  14:55:00
RMD160 Hash old: 4C65242798C260AD2403EF25BB85ED2E8172EEB5
 
As you can see: the RMD160 checksum was not changed, so the file is not changed.
Side-note:
The RMD160 checksum algorithm is something like the MD5 checksum algorithm.
The MD5 checksum is:
The file C:\Program Files\TrojanHunter 4.6\THSec.dll has the following Checksum(s)
MD5 - 0FBD5C3EA0B4166A680DC043456DAEC8
 
I don't have Outpost installed.
I don't know whether Outpost only gives a warning if the checksum of a dll-file was changed (assuming that Outpost uses checksums for that), or that Outpost also gives a warning if the path of a dll-file was changed.
So we need here an Outpost and TH user to tell whether he/she got the same warning as you.
 
Or maybe something else was happening, but at least as far as I can tell the file THSec.dll itself was not changed.
IP Logged
DEE
Newbie
*





   


Posts: 5
Re: TrojanHunter 4.6 Released
« Reply #9 on: Sep 5th, 2006, 10:46am »		 Quote Quote  Modify Modify
Quote:
The file THSec.dll itself was not changed, but the location was changed (assuming that you follow the advice from Magnus to install the new TrojanHunter in a new folder)

 
Hi, Jrb! Thanks for the speedy reply!  
 
I was not aware that 4.6 was released. The first notice I had of the new file was after an update.
I uninstalled the old, & reinstalled the new last night, & Agnitum still noticed the change..
Outpost firewall does not give checksums that I know of.
 
It is handy that it tells you..But I need more information than that.
Think I'm going to have to try out NISFileCheck myself! Smiley
 
Rebooted, scanned in safe mode with ewido & TrojanHunter..
As far as I can tell, upon scanning today, my PC is alright.
 
-Have a great day!  
IP Logged
DEE
Newbie
*





   


Posts: 5
Re: TrojanHunter 4.6 Released
« Reply #10 on: Sep 5th, 2006, 11:40am »		 Quote Quote  Modify Modify
Quote:
I don't have Outpost installed.
I don't know whether Outpost only gives a warning if the checksum of a dll-file was changed (assuming that Outpost uses checksums for that), or that Outpost also gives a warning if the path of a dll-file was changed.

 
...Sorry about that last vague answer. Ok, I've got some coffee in my system...
 
It just tells you that it's been changed. Nothing more.  
I'm unsure of what it looks at, but based on your information probably the place/path..I doubt checksum, unless my checksum changed?  
 
I found a great post about NISFile Check in Wilder Security forum..Will have to read up more, but thanks so much! Smiley
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4525
Re: TrojanHunter 4.6 Released
« Reply #11 on: Sep 5th, 2006, 11:51am »		 Quote Quote  Modify Modify
on Sep 5th, 2006, 7:57am, Brian49 wrote:

What's the reason for this, please?

 
Mainly it's to avoid people not unloading TrojanHunter Guard and then getting errors when installing into the same folder.
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
mcastr
Newbie
*



I love YaBB 1G - SP1!

   


Gender: male
 Posts: 1
Re: TrojanHunter 4.6 Released
« Reply #12 on: Sep 5th, 2006, 12:44pm »		 Quote Quote  Modify Modify
Hello my good friend, I hope you are well,
 
   Sorry i have been so absent. Thank you for the update, our Gurus have the update link and inf posted at the ZoneLabs.org Forum as well.
 
Marcus
(still doing too much moderating over there!  Smiley
 
PEACE my friend
IP Logged
Brian49
Junior Member
**





   


Posts: 71
Re: TrojanHunter 4.6 Released
« Reply #13 on: Sep 5th, 2006, 1:29pm »		 Quote Quote  Modify Modify
on Sep 5th, 2006, 11:51am, Magnus wrote:

 
Mainly it's to avoid people not unloading TrojanHunter Guard and then getting errors when installing into the same folder.

Thanks for responding. That's a relief - I installed into the same folder but remembered to unload first.
IP Logged
Jrb
 Guest
Re: TrojanHunter 4.6 Released
« Reply #14 on: Sep 5th, 2006, 5:24pm »		 Quote Quote  Modify Modify   Remove Remove
posted by DEE:
 
Quote:

...Sorry about that last vague answer. Ok, I've got some coffee in my system...  
 
It just tells you that it's been changed. Nothing more.  
I'm unsure of what it looks at, but based on your information probably the place/path..I doubt checksum, unless my checksum changed?  
 
I found a great post about NISFile Check in Wilder Security forum..Will have to read up more, but thanks so much!  

 
Hi DEE,
 
Forget for the moment NISFileCheck (yep, I know about that archived forum at Wilders; I've posted there Wink).
 
About Outpost:
I don't know from own experience how it works and how it tells that a dll-file has been changed (that could be by checking a checksum, by checking a full-path, etc).
 
Originally I understood that you had your problems coming up after installing TH 4.6.
But now I understand that you had it also with version 4.5.
I also understand that you have only recently installed Outpost.
The best advice I can give: start a new thread here and ask users of both TH and Outpost how to let them work nicely together. I know there are users who are running them both!!!
In the meanwhile I hope that that infection you were talking about, is not interfering here...
 
Cheers, Jan.
IP Logged
Pages: 1 2 3  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »