Jim_W
Newbie



Gender: 
Posts: 22
|
 |
Trojan Hunter Software Testing
« on: Mar 21st, 2002, 12:23am » |
Quote Modify
|
What does this mean for TH? Do I need to do something different in my set-up? JIM Re-test Notes: In the initial tests run with Ruleset Update 25x-2002-03-08, TrojanHunter detected none of the loaded trojan servers. TrojanHunter does allow users to grab "signatures" from running processes and use those signatures to generate new custom Process Rules. During re-testing it was determined that TrojanHunter would detect all six trojans if one Process Rule was added for the Unpacked trojan file. Still further, after Update 25x-2002-03-18 was applied manually (with the custom Process Rule removed), TrojanHunter detected all six loaded trojans. During the initial tests, TrojanHunter Guard (build 581) also had issues renaming the trojan files that had been copied to C: \WINDOWS and removing the WIN.INI Run= edit. After build 588 was installed, TrojanHunter Guard successfully renamed all copied trojan files and removed references to those trojan files from WIN.INI.
|