Welcome, Guest. Please Login or Register.
Search
Members
Login
Register
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   New TrojanHunter Build Uploaded		 « Previous topic | Next topic »
Pages: 1 2  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: New TrojanHunter Build Uploaded  (Read 1467 times)
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
New TrojanHunter Build Uploaded
« on: Feb 8th, 2008, 5:32am »		 Quote Quote  Modify Modify
TrojanHunter 5.0 Build 962 has now been uploaded at http://www.misec.net/products/TrojanHunterSetup.exe. This updates the trial version so that it has the latest detection rules as well as scanner components.
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
Hawkeyelom
Senior Member
****





   


Gender: male
 Posts: 272
Re: New TrojanHunter Build Uploaded???
« Reply #1 on: Feb 8th, 2008, 1:22pm »		 Quote Quote  Modify Modify
I take it that this is NOT the new build with the new installer, we have been impatiently wating for??
 
Please clarify??
 
Thanks
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
Re: New TrojanHunter Build Uploaded
« Reply #2 on: Feb 8th, 2008, 3:50pm »		 Quote Quote  Modify Modify
Yes, this is the new build with the new installer.
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 7357
Re: New TrojanHunter Build Uploaded
« Reply #3 on: Feb 8th, 2008, 11:08pm »		 Quote Quote  Modify Modify
I think there is a misunderstanding here.  The build that was just posted/updated on the Trial Version download link is V5.0.962.  This is the same build as what Licensed users are currently using and have been using for a number of months.  It is not the update/upgrade that was discussed as being available "no later than early January 2008".  
 
When a new user downloads the "Trial Version", he/she will now get V5.0.962, not V5.0.950 (which was an old build of the current active version 5 release of TH).  
 
I think Haweyelom is wanting to know if this Trial Version update is V5.1.xxx that was anticipated in early January 2008.   Wink  The answer to that inquiry is no, it is not.
« Last Edit: Feb 8th, 2008, 11:14pm by siliconman01 » IP Logged
______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.
Hawkeyelom
Senior Member
****





   


Gender: male
 Posts: 272
Siliconman and Magnus re v 5.1
« Reply #4 on: Feb 9th, 2008, 12:32am »		 Quote Quote  Modify Modify
Thanks for the clarification Siliconman. Needless to say I am more than disappointed. As you indicate the 5.1 version was promised a month ago. I am not a happy camper. Cry  I also feel that my question about whether this was the long promsed update was clear as to its meaning.  
 
Magnus, I am very confused, you say it has the new installer, but it apparently is the same version that has been available for some time....??
 
I have been using 4.7 and am very happy with its features and performance. I just finished removing 4.7 and installing 5.0 thinking it was the long promised update that I have anticipated for months.  
 
I already find that I like 4.7 better. The scheduling part of 5.0 is confusing and I haft to go into the task scheduler to fix the schedules the way I want them. Magnus in all due respect this area needs work!
 
I started my first scan after removing the old version properly and installing the new version and set up some schedules. Then started a full scan from within 5.0.
 
I must say I was a bit surprised that it seemed to use a lot more of my system resources. I finally had to stop the scan (we could use a pause and resume feature here). To be able to open Word and type this reply. Note I am using XP PRO with one GB of ram.  
 
It also seems slower than 4.7 After several minutes the scan had not progressed very farHuh I will rerun the scan and do some timing. I am sure that I uninstalled and installed properly
 
Magnus, please where is the promised update? A lot of us have been waiting for this before committing to version 5. I know writning good software takes time, and even though disapointed am a fan of TrojanHunter.  Please give us a progress report.
« Last Edit: Feb 9th, 2008, 12:56am by Hawkeyelom » IP Logged
Jrb
 Guest
Re: New TrojanHunter Build Uploaded
« Reply #5 on: Feb 9th, 2008, 12:38am »		 Quote Quote  Modify Modify   Remove Remove
Thank you Magnus.
 
But, with all due respect, I'm afraid that I think that this is a much confusing upgrade notice...
 
Magnus,
May I ask you to tell us exactly what has been changed?
 
I did a clean install of that new install-file (yes, I am a licenced user).
I noticed far more changes (using several file-integrity-checkers) than what you described...
IP Logged
Hawkeyelom
Senior Member
****





   


Gender: male
 Posts: 272
siliconman, Full Scan time >> is this OK?
« Reply #6 on: Feb 9th, 2008, 1:31am »		 Quote Quote  Modify Modify
I mentioned in my earlier reply that I was concerned about the scan time . I ran a full scan from within TH 5
 
The scan found no problems and scaned 84,038 files in 40 minutes (Note I have ~ 24 GB filled on my hard drive.
 
Is this time resonable for a scan with TH 5?
« Last Edit: Feb 9th, 2008, 1:32am by Hawkeyelom » IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 7357
Re: New TrojanHunter Build Uploaded
« Reply #7 on: Feb 9th, 2008, 1:45am »		 Quote Quote  Modify Modify
Quote:
Is this time resonable for a scan with TH 5?

 
That sounds pretty close to what I am seeing on my Dell XPS-410 with 2.66 ghertz Intel Dual Core CPU, 4 gbyte RAM, and WD 10,000 rpm Sata hard drives.  It takes about 35 minutes on my system for ~77,000 files.  If I deactivate Norton Internet Security 2008 and Norton AntiBot, TH scans a bit faster...which is understandable.  
 
As Magnus stated when V5.0 was released initially, V5.0 now scans all files whereas previous TH versions did not.  V5 has some additional unpackers as well.  So V5.0 is doing a much more thorough interrogation of your system when it is scanning.
IP Logged
______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
Re: New TrojanHunter Build Uploaded
« Reply #8 on: Feb 9th, 2008, 5:10am »		 Quote Quote  Modify Modify
Version 5 does a much more thorough job of scanning all files regardless of extension, so it will take some more time to complete a scan. As siliconman mentions, it also contains additional unpacking/detection features in the engine that will cause it to use more resources.  
 
What sort of problems are you having with the scheduler?
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
Hawkeyelom
Senior Member
****





   


Gender: male
 Posts: 272
Magnus, some problems I see with TH 5
« Reply #9 on: Feb 9th, 2008, 1:54pm »		 Quote Quote  Modify Modify
Thanks for your concern.
 
Magnus, I figured out how to use the scheduling function with a little trial and error. There is a problem in that you have to select a time first,  then enable.  Adding instructions here would solve that. What I was most concerned about is that the options  to schedule are limited from within TH.
 
 For example, if you want to set a schedule to check for updates every two hours, you haft to go to the task in scheduled tasks and make the changes there.  
 
For scheduling TH to run a scan, I wanted to set the time to 9:30 PM on every Friday. To get to that point I edited the schedule in “Trojan Hunter Scanner” in Scheduled tasks control panel.
 
To me there are two fixes. Put some information on the scheduling page to direct users to the scheduled tasks for further editing, or add more choices in setting up the schedules as is offered in scheduled tasks. The latter is the more elegant solution, but adds more code, testing etc. For me adding something like “to further edit or change your schedule go to scheduled tasks in Control Panel” would suffice.
 
Another problem is that there is no way to stop a silent scan without opening task manager…. Should be an option to open TH and stop silent scan. Also I would personally like an option to schedule a visible scan (like you can do from with TH) as well as a silent scan.
« Last Edit: Feb 9th, 2008, 2:18pm by Hawkeyelom » IP Logged
Hawkeyelom
Senior Member
****





   


Gender: male
 Posts: 272
Magnus, and all Word doc problem with TH Scan
« Reply #10 on: Feb 9th, 2008, 2:22pm »		 Quote Quote  Modify Modify
Found problem with opening Word (Office 2003, XP Pro). I have a very large doc called ScrathPad.doc, which I have an icon for on my desktop.  As a test I opened TH 5, started a scan, and then attempted to open the word doc, it was very slow to open and was essentially not opening. The behavior I had observed before and mentioned in my previous post
 
Opening word first , word opened properly then I could select the doc.
 
I fixed the problem with opening the doc first by removing most of the contents stored in the document. The smaller document opened just fine.    
 
Opening the large document without TH5 running was not a problem.  Do not know why opening a large Word document with TH scanning should be a problem, but this was reproducible for me, Magnus IMHO, you should look into this.
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
Re: New TrojanHunter Build Uploaded
« Reply #11 on: Feb 10th, 2008, 8:53am »		 Quote Quote  Modify Modify
on Feb 9th, 2008, 12:38am, Jrb wrote:
Thank you Magnus.
 
But, with all due respect, I'm afraid that I think that this is a much confusing upgrade notice...
 
Magnus,
May I ask you to tell us exactly what has been changed?
 
I did a clean install of that new install-file (yes, I am a licenced user).
I noticed far more changes (using several file-integrity-checkers) than what you described...

 
There are no new features - it's simply a new setup file with the latest builds of the scanner and all the latest rulefiles. Note that since this is a new setup file compilation several of the files will have new timestamps and thus have their hash value changed.
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
Jrb
 Guest
Re: New TrojanHunter Build Uploaded
« Reply #12 on: Feb 10th, 2008, 8:52pm »		 Quote Quote  Modify Modify   Remove Remove
on Feb 10th, 2008, 8:53am, Magnus wrote:

 
There are no new features - it's simply a new setup file with the latest builds of the scanner and all the latest rulefiles. Note that since this is a new setup file compilation several of the files will have new timestamps and thus have their hash value changed.

 
Hi Magnus,
 
Thanks for your reply. I do appreciate it !
 
Please let me first assure you that I had nor have any intention to offend or hurt you.
 
Reason(s) for posting is that I am wondering about some things (but I could be completely wrong (of course!)):
 
1.
It are not only datestamps and HASHES that were changed.
Some version-numbers were also changed (and a file-name), and a new .trf file was added.
2.
I was wondering whether ALL users of TH should install this new build.
And if yes, shouldn't we announce this "new" build on other forums too?
And if yes, why didn't have this new build a new build-number?
IP Logged
Jrb
 Guest
Re: New TrojanHunter Build Uploaded
« Reply #13 on: Feb 10th, 2008, 9:17pm »		 Quote Quote  Modify Modify   Remove Remove
1.
Example of a file (trojanhunter.exe itself) that had its size,
datestamp and HASH changed, but not its version-number:
 
Application: c:\program files\trojanhunter 5.0\trojanhunter.exe
Status:  Changed
Version old: 5.0.0.962
Version new: 5.0.0.962
Size old: 2417824
Size new: 2418336
Date old: 2007-10-23  02:30:10
Date new: 2008-02-08  11:22:06
RMD160 Hash old: 772038290E904357D62E7E77C4298955BA5D5F2E
RMD160 Hash new: B2949E531AA7E5A3E8F7D6D4A2306BDF7C1D0D20
 
 
2.
Example of a file with updated version-number:
 
Application: c:\program files\trojanhunter 5.0\thguard.exe
Status:  Changed
Version old: 5.0.0.277
Version new: 5.0.0.278
Size old: 1046688
Size new: 1047712
Date old: 2007-09-09  09:31:46
Date new: 2008-02-08  11:22:08
RMD160 Hash old: 6CEDA4FA6DA497723145F05E9C8C11A22206E366
RMD160 Hash new: 55775A10C608E2E0BF5012814544AD64AF18B060
 
 
3.
Example of a renamed file:
 
Application: c:\program files\trojanhunter 5.0\contmenu.dll
Status:  Changed: (Deleted, File not found error)
Version old: N/A
Size old: 408064
Date old: 2007-09-08  17:25:28
RMD160 Hash old: 480EEF2711D017159463C3A2E0CB1BC470AB8DFD
 
Application: c:\program files\trojanhunter 5.0\contextmenu.dll
Status:  New added
Version old: N/A
Size old: 619520
Date old: 2007-09-03  12:50:24
RMD160 Hash old: 39F8246D694434BD66163818A909D50D6CFADE75
 
 
4.
Example of a new .trf file:
 
Application: c:\program files\trojanhunter 5.0\rulefiles\heuristicrules.trf
Status:  New added
Version old: N/A
Size old: 89
Date old: 2007-09-16  13:01:30
RMD160 Hash old: 316F1BB56E448C9FB00CF2FFEEC4459DE5147C9F
 
 
Note:
All examples using file-integrity-checker NISFileCheck.
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4523
Re: New TrojanHunter Build Uploaded
« Reply #14 on: Feb 11th, 2008, 3:38am »		 Quote Quote  Modify Modify
It's not necessary for licensed users to install this new setup file, since they have already received the new file versions via LiveUpdate.
 
Like I said in the previous post, the reason that the hash values are different is that when a new setup file is build, the files are digitally signed again. This produces a hash change since the signature includes a timestamp which is always different from build to build.
IP Logged
Follow me on Twitter: http://twitter.com/mmischel
Pages: 1 2  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »