Upgrade Questions

Ikeb · Posted: Wed Mar 24, 2004 7:56 pm Post subject: Upgrade Questions

I'd like to upgrade TH to the latest version. I presume I have to stop the THGuard.exe process correct? But for some reason I can't have Task Manager perform an End Process. ... "Cannot perform task. Access is denied." Why is that? I have admin privilges and I can't delete this process?

I'm running Win2K Advanced Server 5.00.2195 with Service Pack 4.

BTW, how do I configure THGuard? Isn't there supposed to be a TH Guard icon in the system tray?

The reason I'm asking questions which might be answered in the Help file is that with the version 3.7 version currently installed, when I follow the Help menu item, another of my applications opens! Any idea what could cause that?

claire · Posted: Wed Mar 24, 2004 11:50 pm Post subject:

Hi IKeb,
To upgrade first unload TH GUARD
then uninstall Trojan Hunter but save your license file
download the new version and put your license file in the new directory
You should be fine

PS to unload TH GUARD right click on the systray icon and choose unload

Ikeb · Posted: Thu Mar 25, 2004 1:04 am Post subject:

OK but as I said, there's no TH GUARD icon in the system tray.

And why can't I just stop the process? Since I have admin rights on my own machine, why am I denied the abilty to stop the process?

BTW, would the license file get deleted upon uninstall if I leave it in the directory? If not, can't I just leave in the directory assuming I use the same one for the updated version?

Magnus · Posted: Thu Mar 25, 2004 11:52 am Post subject:

There should be a TrojanHunter Guard icon in the system tray. If there is none you'll need to start regedit, delete the value HKLM\Software\Microsoft\Windows\CurrentVersion\Run\THGuard and reboot. Then you can uninstall the old version and install the new one. The license file will be left in the folder after uninstallation. The reason you can't terminate the Guard using Task Manager is because it's protected from process termination to prevent trojans from simply killing the guard to get past it.

Ikeb · Posted: Thu Mar 25, 2004 12:39 pm Post subject:

D'oh! Of course! FYI there is definately no TH GUARD icon in the system tray so thanks for the added info Magnus.

Ikeb · Posted: Thu Mar 25, 2004 4:12 pm Post subject:

OK I seem to be getting into some deep stuff here! I got rid of the Registry THGUARD Run reference and uninstalled V3.7. Before installing the latest version I decided to rename the directory from TrojanHunter 3.7 to TrojanHunter, not wanting to have yet another directory created. Except that when I installed v3.85 and asked to start TH Guard and TH Scan, I found that each program was expecting to be able to read the Rulesets.ini file in the TrojanHunter 3.7 directory! Rolling Eyes

Of course that directory was renamed and the install probably overwrote the Rulesets.ini (it's only 1K now, not sure what size it might have been).

Anyway, I got lots of popup warning messages when attempting to start TH GUARD and TH Scan also tells me there are no rulesets installed. LiveUpdate also failed to place the updates 'cause it was looking for something in TrojanHunter 3.7 directory. How was I to know that the registry would still have these references? Rolling Eyes

I figure I better get some expert advice before chopping off another finger. What should I do at this point?

Magnus · Posted: Thu Mar 25, 2004 4:16 pm Post subject:

Open TrojanHunter.ini in Notepad and change any references to the "TrojanHunter 3.7" folder to just "TrojanHunter".

Ikeb · Posted: Thu Mar 25, 2004 4:28 pm Post subject:

Wow! Thanks for the quick response. And looky here! Did a LiveUpdate, TH GUARD loaded ... with a System tray icon to boot! ... and TH Scan pops up without incident!

That was a lot less pain than I imagined. Smile

Like zero pain when I imagined the rack was in store for me!

Thanks Magnus!


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 1356 pages served in previous 5 minutes. Page Rendered: 0.666 seconds.