Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Dec 1st, 2008, 8:25pm
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   TH Guard not working?		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: TH Guard not working?  (Read 391 times)
delerium
Newbie
*



I love YaBB 1 Gold!

   


Posts: 2
TH Guard not working?
« on: Apr 16th, 2002, 4:37am »		 Quote Quote  Modify Modify
Hi,
I'm currently evaluating TH and have TH-guard running in the background.  I deliberately downloaded a trojan, but TH-guard did not detect anything.  Thinking that it might be because the trojan was in a zip file, I unzipped the file into a folder, and again, TH-guard did not catch that.
 
I tried scanning with the TH console and it did detect the trojan (CyberSpy 1.3).  Thinking that i might be mistaken about how TH-guard works, since the trojan was not loaded into the memory at all, I disabled my antivirus and deliberately launched the trojan.  Again, TH-guard did nothing!
Did i miss something?  Huh
« Last Edit: Apr 16th, 2002, 4:38am by delerium » IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4120
Re: TH Guard not working?
« Reply #1 on: Apr 16th, 2002, 11:02am »		 Quote Quote  Modify Modify
Hi,
 
Could you send the file in question to submit@trojanhunter.com ?  Also, are you sure you were loading the trojan server into memory (and not the client)?
IP Logged
delerium
Newbie
*



I love YaBB 1 Gold!

   


Posts: 2
Re: TH Guard not working?
« Reply #2 on: Apr 16th, 2002, 11:19am »		 Quote Quote  Modify Modify
The mail is on its way Smiley
I've tried loading both the trojan server and client into memory, and nothing happens as far as THGuard is concered.
 
Interestingly, I find that a couple other of trojan scanners have problems with this trojan too.  TauScan's console could not even detect this trojan (although it is listed in its trojan list), until its very latest update today.
 

I modified this to remove the download link for the trojan since that's not the sort of thing that should be posted publicly, at least not here. /Magnus
« Last Edit: Apr 16th, 2002, 11:41am by Magnus » IP Logged
mozar
Highly Honored Mass-Poster
*******





   


Posts: 1524
Re: TH Guard not working?
« Reply #3 on: Apr 16th, 2002, 3:34pm »		 Quote Quote  Modify Modify
  Hello  ,
 
   Interesting  ,  today  at  DSL's Forum  an user called Euphoria  , in the post "TrojanHunter Guard not working ? " , presented the same , say , problem exposed here by Delerium .
   Magnus , I presume you have already  read  that post .
 
    Regards ,
     mozar
IP Logged
vampirefo1
Senior Member
****



I love YaBB 1 Gold!

   
Email

Posts: 328
Re: TH Guard not working?
« Reply #4 on: Apr 16th, 2002, 4:52pm »		 Quote Quote  Modify Modify
Just a guess here, but this Trojan is not listed in the process rules, so the guard doesn't see it? TH has two programs in one, you have the one demand scan which sees the Trojan, then you have the guard which uses the process rules to identify Trojans, seeing it's not listed in the process rules. This could be the reason,Of course I could be wrong, wouldn't be the first time.LOL
« Last Edit: Apr 16th, 2002, 4:56pm by vampirefo1 » IP Logged
TrojanHunter Stands for privacy !!!!!!!!!!!




Companies would rather lose you as a customer than fix the problem
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW   Email

Gender: male
 Posts: 2883
Re: TH Guard not working?
« Reply #5 on: Apr 16th, 2002, 9:24pm »		 Quote Quote  Modify Modify

on Apr 16th, 2002, 3:34pm, mozar wrote:
Interesting,  today at DSL's Forum a user called Euphoria, in the post "TrojanHunter Guard not working?" , presented the same, say, problem exposed here by Delerium.  Magnus, I presume you have already read that post.

Here's the link to that post, http://www.dslreports.com/forum/remark,3048707~root=security,1~mode=flat -- hope that helps.
IP Logged
Jamming
Stole All the Forum Stars
********




Remember when a Trojan was just for protection.

   


Gender: male
 Posts: 2039
Re: TH Guard not working?
« Reply #6 on: Apr 17th, 2002, 6:13am »		 Quote Quote  Modify Modify

on Apr 16th, 2002, 4:52pm, vampirefo1 wrote:

Just a guess here, but this Trojan is not listed in the process rules, so the guard doesn't see it? TH has two programs in one, you have the one demand scan which sees the Trojan, then you have the guard which uses the process rules to identify Trojans, seeing it's not listed in the process rules. This could be the reason,Of course I could be wrong, wouldn't be the first time.LOL

 
As I said in my post over there, I have seen at least six different ruled for CyberSpy.130 which as near as I can tell by looking at the Identifiers is the same as CyberSpy 1.3.
IP Logged
Team Z Member

Servare cives, major est virtus patriae patri.
- Lucius Annaeus Seneca
I was born an American; I live an American; I shall die an American!
- Daniel Webster
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register