Trojan Hunter3.9 available

claire · Posted: Tue Jun 01, 2004 11:53 am Post subject: Trojan Hunter3.9 available

TrojanHunter 3.9 has been released. This new version fixes the "Loading trojan icons" window problem and adds several small enhancements. This is a recommended upgrade. Install into a new folder, reboot and then delete the old TrojanHunter folder. (Make sure you unload TrojanHunter Guard and close the scanner before you start the installation.)

Download:

http://www.misec.net/products/TrojanHunter.exe

Nick ADSL also posted in the update forum Wink

Ikeb · Posted: Tue Jun 01, 2004 3:14 pm Post subject: Re: Trojan Hunter3.9 available

DCZ · Cadet Joined: Sep 05, 2003 Posts: 2 Location: Canada

Hi Ikeb, you shouldn't be able to end THGuard process from Task Manager, it's designed that way. Do you have the THGuard icon set to alway's hide in Customize Notifications in Taskbar and Start Menu? The way to unload the Guard is by right clicking on the icon in the system tray and selecting unload guard. Feel free to post in the Trojan Hunter forum, there are more knowledgable persons than myself that can help you there.
http://forum.misec.net/

Randy_Bell · Posted: Tue Jun 01, 2004 5:33 pm Post subject:

Claire mentioned this in thread at TH forum: http://forum.misec.net/board/TrojanHunter/1086125858

So I have come here to help if I can. Ikeb, as DCZ said, TH Guard is hardened against attack and malicious or rogue termination {via the THSec.dll} and that is why you cannot terminate it using Task Manager. You must open the Guard and unload from there. If you can't access the icon in System Tray, try going to your Programs directory and running TH Guard from there; Start, Programs, TrojanHunter, TH Guard. Hope that helps.

claire · Posted: Tue Jun 01, 2004 11:47 pm Post subject:

Thanks for your help Randy.

That's what I suggested him Smile

claire · Posted: Tue Jun 01, 2004 11:53 pm Post subject:

Hey Randy,
I am afraid this will not do the trick.Ikebb has a second TH GUARD instance coming in the systray.He can unload it but the first one remains
(with no icon)

Any other idea?

Randy_Bell · Posted: Wed Jun 02, 2004 1:50 am Post subject:

He can boot into Safe Mode and rename THSec.dll to THSec.disabled {or some other name} to disable it. Then boot back into Normal Mode and he should be able to terminate any instance of the Guard since the THSec.dll which prevents termination will have been disabled. Getting two instances of the Guard almost sounds like he has two entries in the registry that load the Guard, but disabling THSec.dll should allow him to terminate any instances of the Guard running in memory, and then hopefully do the install of TH 3.9 .. Good Luck! Wink

Ikeb · Posted: Wed Jun 02, 2004 10:00 am Post subject:

Thanks for your help Claire.

And thanks for your suggestion Randy. Yes it makes sense that THGuard not be unloadable from Task Manager. Guess it's off to safe mode. .... although I'd really like to resolve why that blasted icon doesn't show up in my system tray. Confused

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run has, along with a few other prgms being started, a single THGuard value set to: "C:\SYS\TrojanHunter\THGuard.exe". I searched for but was unable to find any other "THGuard" string in the registry .... or should I be searching for something else?


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 734 pages served in previous 5 minutes. Page Rendered: 0.379 seconds.