Potential Resource conflicts

horseman · Posted: Tue Apr 13, 2004 8:18 am Post subject: Potential Resource conflicts

I'm just over 50% thru pre-purchase eval on TH3.85 trial version.
I have several current issues including detection of polymorphic Trojans and discrepancies between consecutive TH scan results that may well be resolved with further research here and/or on http://forum.misec.net/board/TrojanHunter

However my main priority is to identify potential resource conflicts between TH and currently installed software that could be causing following consistent symptoms:

1. Inability to display TH on first invocation in new session - no TL entry (other than resident THGuard). Irrespective how invoked (cmd line/Quickstart/desktop). Splashscn shows rules etc loading but then dissappears. I suspect there's a hidden process where TH is performing self-integrity checking perhaps?
2. Subsequent TrojanHunter invocation consumes 90%+ (presumably on idle thread priority) but fails to completely open scanning window when receiving focus.

Obviously I need to embark on selectively removing resident apps/daemons until I locate one/more potential conflicts but in case this is not machine specific and I've missed some known (obvious conflict/tuning)problem I offer following summary for comment:

Is there any advance logging/diag available with Trial version?

I have run HJT 1.97.7 and cannot identify any obvious spyware/intrusion.
HJT results + Belarc or similar available on request.

Following are run regularly:
Ad-aware 6.181 Ref 1R286 11-04-04 : user request
S&D 1.2 4-4-04 : user request
SpywareBlaster 3.1 : user request
PestPatrol 4.4.2.7 : daily sched (+ Cookie/KeyPatrol)

NAV 8.07.17c (part of SystemWorks 2002.05 Bld 72)
: scans daily + week sched

ZAP 4.5.594 :

OS : XP Home + SP1 + all critical HF's
Other Main resident stubs include MS Office 2000 (not SP1).

Hardware : 2.2G P4 + 512 DDR RAM + 550/773 MB page size min/max on 2 Drives = 1.8G available

Performance option settings -Visual Effects=Adjust for Best Performance
-Advanced/Proc sched = progs
-Memory usuage=system cache

If I should be posting on Main forum and not CC fora please advise (but usually initial PID/PSI deterministics seem to point to this forum for HJT analysis first)

TIA - TW

Magnus · Posted: Tue Apr 13, 2004 9:43 am Post subject:

If you could open Debug.log in the TrojanHunter folder in Notepad just after the freeze happens and could post its contents here then that would help. It may well be a conflict with one of your other programs. Could you check to see if the scanner opens in Safe Mode? If you rename TrojanHunter.exe to something else, e.g. TH.exe are you then able to open the scanner?

horseman · Posted: Tue Apr 13, 2004 10:17 am Post subject:

horseman · Posted: Wed Apr 14, 2004 10:06 am Post subject:

Results inconclusive/incomplete but initially SAFE boot everything runs as expected.

On first NORMAL boot both problem 1 and problem 2 appeared to have resolved. However subsequent boots reproduced prob 1 and allowing SCAN to run further appeared to regress to problem 2.

Using Norton process viewer I may have identified my ISP's "Gearbox" (network diagnostic) utility as possibly causing a conflict - watch this space.

TW


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 855 pages served in previous 5 minutes. Page Rendered: 0.391 seconds.