New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 21)
· Marcia's (QA2)
· Bill G's (CO9)
· Paul's (AR 5)
· Robin's (AR 1)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· Recommend Us
· RegChat
· Reviews
· Search (Topics)
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 591
Comments: 15
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin 

Trojan Hunter3.9 available

 
Post new topic   Reply to topic       Computer Cops Forum Index -> TrojanHunter
View previous topic :: View next topic  
Author Message
claire

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Apr 21, 2002
Posts: 4618
Location: Belgium

PostPosted: Tue Jun 01, 2004 11:53 am    Post subject: Trojan Hunter3.9 available
Reply with quote

TrojanHunter 3.9 has been released. This new version fixes the "Loading trojan icons" window problem and adds several small enhancements. This is a recommended upgrade. Install into a new folder, reboot and then delete the old TrojanHunter folder. (Make sure you unload TrojanHunter Guard and close the scanner before you start the installation.)

Download:

http://www.misec.net/products/TrojanHunter.exe



Nick ADSL also posted in the update forum Wink

_________________
Carpe Diem
Back to top
View users profile Send private message
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3312
Location: Ottawa, Ontario, Canada

PostPosted: Tue Jun 01, 2004 3:14 pm    Post subject: Re: Trojan Hunter3.9 available
Reply with quote

claire wrote:
TrojanHunter 3.9 has been released. This new version fixes the "Loading trojan icons" window problem and adds several small enhancements. This is a recommended upgrade. Install into a new folder, reboot and then delete the old TrojanHunter folder.

Or I could just uninstall the old version first? Magnus should really fix this so that newer versions can upgrade by simply installing over the existing files.

claire wrote:
(Make sure you unload TrojanHunter Guard and close the scanner before you start the installation.)

How do I unload THGuard? The system tray icon never appears and when attempting to terminate the process via Task Manager and accepting the warning about possible instabilities, the following msg pops up:



Access_denied.jpg
 Description:
Task Manager window
 Filesize:  6.54 KB
 Viewed:  195 Time(s)

Access_denied.jpg



_________________
Ikester

I like SPAM .... on my sandwich!
Back to top
View users profile Send private message Send email
DCZ

Cadet
Cadet



Joined: Sep 05, 2003
Posts: 2
Location: Canada

PostPosted: Tue Jun 01, 2004 5:07 pm    Post subject:
Reply with quote

Hi Ikeb, you shouldn't be able to end THGuard process from Task Manager, it's designed that way. Do you have the THGuard icon set to alway's hide in Customize Notifications in Taskbar and Start Menu? The way to unload the Guard is by right clicking on the icon in the system tray and selecting unload guard. Feel free to post in the Trojan Hunter forum, there are more knowledgable persons than myself that can help you there.
http://forum.misec.net/
Back to top
View users profile Send private message
Randy_Bell

Symantec
Symantec
Premium Member
Premium Member


Joined: Mar 13, 2004
Posts: 49
Location: USA

PostPosted: Tue Jun 01, 2004 5:33 pm    Post subject:
Reply with quote

Claire mentioned this in thread at TH forum: http://forum.misec.net/board/TrojanHunter/1086125858

So I have come here to help if I can. Ikeb, as DCZ said, TH Guard is hardened against attack and malicious or rogue termination {via the THSec.dll} and that is why you cannot terminate it using Task Manager. You must open the Guard and unload from there. If you can't access the icon in System Tray, try going to your Programs directory and running TH Guard from there; Start, Programs, TrojanHunter, TH Guard. Hope that helps.

_________________
But now abide faith, hope, love, these three; but the greatest of these is love. (1 Cor. 13:13)
Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
claire

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Apr 21, 2002
Posts: 4618
Location: Belgium

PostPosted: Tue Jun 01, 2004 11:47 pm    Post subject:
Reply with quote

Thanks for your help Randy.

That's what I suggested him Smile

_________________
Carpe Diem
Back to top
View users profile Send private message
claire

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Apr 21, 2002
Posts: 4618
Location: Belgium

PostPosted: Tue Jun 01, 2004 11:53 pm    Post subject:
Reply with quote

Hey Randy,
I am afraid this will not do the trick.Ikebb has a second TH GUARD instance coming in the systray.He can unload it but the first one remains
(with no icon)

Any other idea?

_________________
Carpe Diem
Back to top
View users profile Send private message
Randy_Bell

Symantec
Symantec
Premium Member
Premium Member


Joined: Mar 13, 2004
Posts: 49
Location: USA

PostPosted: Wed Jun 02, 2004 1:50 am    Post subject:
Reply with quote

He can boot into Safe Mode and rename THSec.dll to THSec.disabled {or some other name} to disable it. Then boot back into Normal Mode and he should be able to terminate any instance of the Guard since the THSec.dll which prevents termination will have been disabled. Getting two instances of the Guard almost sounds like he has two entries in the registry that load the Guard, but disabling THSec.dll should allow him to terminate any instances of the Guard running in memory, and then hopefully do the install of TH 3.9 .. Good Luck! Wink
_________________
But now abide faith, hope, love, these three; but the greatest of these is love. (1 Cor. 13:13)
Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3312
Location: Ottawa, Ontario, Canada

PostPosted: Wed Jun 02, 2004 10:00 am    Post subject:
Reply with quote

Thanks for your help Claire.

And thanks for your suggestion Randy. Yes it makes sense that THGuard not be unloadable from Task Manager. Guess it's off to safe mode. .... although I'd really like to resolve why that blasted icon doesn't show up in my system tray. Confused

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run has, along with a few other prgms being started, a single THGuard value set to: "C:\SYS\TrojanHunter\THGuard.exe". I searched for but was unable to find any other "THGuard" string in the registry .... or should I be searching for something else?

_________________
Ikester

I like SPAM .... on my sandwich!
Back to top
View users profile Send private message Send email
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> TrojanHunter All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops