Coming Soon - Gladiator Scanner !

[Gladiator]

Due to the high technology, the computer world has been busy with the security issues whetever it is from inside or outside organization.

Viruses, worms and trojans are some of the greatest risks in information technology. The growth of viruses, worms and trojans develops the number of the antivirus software vendors.

Gladiator Security Labs, which is one of the vendors, has offered security software for FREE. - Yep, thats right !

The Gladiator Scanner is still under development, but the current alpha version does a pretty nifty job so far.

Also you can update the interface + engine + pattern by clicking the online live update button in the about screen.

Members may participate in our online discussion groups. Each individual piece of content (gladiator scanner software support, virus reviews, questions etc.) has its own discussion forum, through which members may share personal research and experience with their peers. Membership is free.

Please, dont expect too much, coz i'm doing real multitasking at this time - programing, webdesign, updates... Hell, at least i'm not megaman hehehe ;D

Best regards
Gladiator 8)

[FanJ]

Hi Gladiator,

Welcome ! :)
Thanks for letting us know about your new AT !!!

Best regards, Jan.

[Paul Wilders]

Hi Gladiator,

I've been expecting a post like this one for some time ;) - obviously took some time to announce your app 8).

Welcome. For those lacking funds to buy an anti-trojan, a rather solid AT is a blessing. Do hope your app will get there in the end! Competing with commercial apps like TDS for example isn't an issue here I presume. Providing a nice freeware AT looks like the ultimate - and very worthwhile! - goal to me.

As ever, providing reasonably reliable security software for those who cannot affort buying commercial security software, is something I personally do applaud. Wish you all the best in developping your app!

regards.

paul

[Gnostic]

Has anyone tried the version available for download from the Gladiator site? Any thoughts?

[Mr.Blaze]

we need to send a hundred of our elite dowen there to help out that way the app dont become another oneof those short term to greatness then the poor guy gets sick or something then it becomes abandon.

im starting to see that more and more and its a shames i belive truly trojan check could had been the best software out there

[mhg]

what is the website of Gladiator Security Labs?

[Gladiator]

http://www.gladiator-secure.de

@MRBLAZE:
Well, Gladiator Scanner development time (at all): 16 days.....

Gladiator

[Bethrezen]

hi Gladiator

thanks for the heads up

i need a good sterdy ease to use AT i was waiting on ants but it looks like that could be a while as the lead programer is ill rigth now hope he feels better soon

i wish there where more generous people like you and the authers of programs like adshield and ants etc offerin there time and expertese providing the rest of us with free apps to keep us safe and secure while on line coz if there was the world and the web would be a better place

id have to agree with mr blaze some of the people here at wilders should come over to ya web page and help out

id also agree with paul

"Providing a nice freeware AT looks like the ultimate - and very worthwhile! - goal to me.

As ever, providing reasonably reliable security software for those who cannot affort buying commercial security software, is something I personally do applaud"

good job

keep us posted hope all goes well

Blessed be

[Gladiator]

Thank you very much.

Anyway, Gladiator Scanner scans for trojans, worms and viruses.
Next week is the first alphaversion of the Realtime-Scan-Driver ready i think.

Greets,
Gladiator

[snapdragin]

Hello Gladiator and welcome! :D

i just peeked at your site and, green being my favourite colour! LOL..well, you've done a fantastic job!!

it is wonderful that you are offering a free AT/AV program, so many will benefit from such a gift.

i looked into the Member's Forums, but it is in a language i do not speak.....do you have plans for a English-speaking Member's Forum by any chance?

i know many students, who are watching every penny while going through school, will be very interested in your scanner.

thank you again!

snap

[Gladiator]

My forum is english ;D (look at the bottom) hehe ;D

And new guests are welcome to share informations about the scanner project.


We need a english moderator there, coz i can't do all the things at same time.

Offers to Gladiator@Gladiator-Secure.de please 8)

That will help me...

Greets Gladiator

[snapdragin]

ahhh-Ha!...i think i found my way LOL!

so on the Forum i scroll down past the
Gladiator Security Labs General
Gladiator Scanner
Viruses and Trojans Information Centre, until i get to the
Multilingual Topics...and under the Computer Security - English Topics.....and there i click. (tries not to look totally lost)

did i find it alright?

ahh...i am going to have to take up another language!
(i'm missing too much) :(

[notageek]

LOL snap. It took me a few minutes to find the english forum there also.

This AT looks promising. Keep us posted on the progress of the program. Oh yeah welcome to the forums.

[Gladiator]

{QUOTE-> quoting: notageek link=board=25;threadid=3288;start=0#22282 date=1030594388]
Keep us posted on the progress of the program. Oh yeah welcome to the forums.
<-QUOTE}

Well, your wish in my ears: Next update Interface Version 0.1.0 available (now)

Fast enough ? ;D

Gladiator

[Johnny_B._Goode]

Hi

Thank you Gladiator, you're work looks interesting and I'm trying out you program! :)

Regards

Gordon

[mhg]

Question Gladiator:

after i ran a full scan i have 2 windows (the main yellow window and the scan green one).
as i close the main this geen one does not close. i do not how to close it (not close/x buttons).
my screen reselution is 640x480 ..
is there any hiden buttonds i can see?? if not how can i close it ? ??? ??? ??? ???

[Gladiator]

well, you need to have 800x600 at least.
But i'm still working ---> (optional) SMALL console....

Gladiator

[Paul Wilders]

Hi Gladiator,

Some questions - guess you don't mind answering them ;):

1) as it seems, signatures are based on the first 4 kb from a (scanned) file. Do you agree, this creates the opportunity to fool the engine quite easily?

2) depacking seems to be a prob for the actual engine?

If so: are you planning to implement a new engine, capable of handling the issues mentioned above?

regards.

paul

[Vampirefo]

When I click the update I get MSINET.OCX error, then it crashes, It gave me five false alarms, the paths to the Trojans, are incomplete, in the view, so it's hard to track down the suspect files.

It was able to detect two out three Trojans, I had in a folder, but no cleaning options were given, it didn't remove the Trojans, nor did it ask to do so.

[Paul Wilders]

Hi Vamp,

Nice seeing you - and seeing you joining the discussion ;)

regards.

paul

[Gladiator]

Its still under development - so the next engine update will bring more features 8) (also unpacking routines)

MSINET: You have to install and use regsvr32 on MSINET.OCX.

Gladiator

[Paul Wilders]

{QUOTE-> Its still under development <-QUOTE}

I know it's an Alpha version ;)

{QUOTE-> so the next engine update will bring more features (also unpacking routines) <-QUOTE}

Any ETA on that? While on issue: how about UPX, PELite, APack for example?

regards.

paul

[Gladiator]

Yes it will unpack this at least.

The problem is you can not "include" an UPX.EXE even if it's freeware.
So have to build my own decrunch functions.

Yes i know, UPX is Open Source, but that means not you can do anything with it.

You understand what i mean ?

Greets Gladiator

[wizard]

{QUOTE-> quoting: Gladiator link=board=25;threadid=3288;start=15#22388 date=1030649655]The problem is you can not "include" an UPX.EXE even if it's freeware. So have to build my own decrunch functions. <-QUOTE}

I do not understand this. Can you explain this a little bit more? I know at least two programs that included UPX while using it as a seperate file. Might not be as good as the unpacking engine of KAV or McAfee but at least it works and should be quiet easy to implement.

{QUOTE-> Yes i know, UPX is Open Source, but that means not you can do anything with it. <-QUOTE}

Do you mean that due to the fact that UPX is not a visual basic source?

Anyway I am looking forward to see the improvements of your development. So far outside an antivirus software I have never seen a good unpacking implementation. Ants anounced it but sofar I had no change to test it.

Instead of an unpacking feature what do you think about memory detection? Other anti trojan programs use this approach.

wizard

[Gladiator]

First at all: I'm C/C++ and Asm Developer.
VB helps in the start time to "design" a interface and gives a first impression of the "look and feel".
After this, you can port this code into C/C++ to get ride of some bitches (like runtime libs) hehe ;D

memory scan is an other feature that will be available in one of the next updates.

Calling an UPX.EXE eg. "UPX -d file.ext" to unpack this file lets say into an temp-folder to scan it there is (in my mind) bullshit.

Just watch the steps:

START (loop)
...Search for filemask (eg *.exe)
...FindFirstFile - > get infos
...check if it has UPX-Header
... no: check for other known headers --- yes: call UPX_SCAN
...well seems to be EXE - scan it
UNTIL no more files to scan

Then you build a function UPX_SCAN (maybe) like this:
1. Unpack the file into a tempfolder
2. Open this file (binary input)
3. Start the loop between all know signs in database
4. jump to offset and scan for sign
5. repeat until all signs

Well, its a VERY SIMPLE description (for understanding only)

But....

You make stupid Fileoperations on each packed file.
That means LOAD UPX into Memory (coz its extern and its not allowed to bind / eg. link this)
Then you must expand the file TO DISK.

It would be much more better to expand into a shared memory place and scan there (much more faster)
Thats what i'm making now.

Gladiator

[wizard]

I agree that an external upx call is not the best way but it is easier to implement than an unpacking engine. Also the unpacking engine will bring some fun when you try to unpack also crypter (do you have any plans for that?). :) We will see what your future development brings. :)

wizard

[DrSeltsam]

>memory scan is an other feature that will be available in one of the next updates.

Its incompatible to your signature - but lets wait :o).

>Calling an UPX.EXE eg. "UPX -d file.ext" to unpack this file lets say into an
>temp-folder to scan it there is (in my mind) bullshit.

Agree ;o).

>It would be much more better to expand into a shared memory place and scan
>there (much more faster) Thats what i'm making now.

Don't think so. It might be a few ms faster if you scan more than one packed file (caching). The read of the unpacked file should be very fast (allready cached).

Why do you use shared memory?

[Gladiator]

Andreas, if you are so smart, why you didn't program this ?
You did only bundle a original UPX.EXE file to unpack this.

Gladiator

[Paul Wilders]

Guys, (gladiator and Andreas that is..)

I do notice some kind of personal tension here. Nothing wrong with that - happens all the time, on all kinds of subjects.

That said: I'd rather would prevent this thread turned into some kind of a spitting contest ;).

Thus, a kind (but nevertheless firm) request: stay on topic, will you? Consider this merely as a precaution post.

Thanks in advance.

regards.

paul

[Prince_Serendip]

:) Hi Paul! I promise to try to keep things on topic! To quote Gladiator:
{QUOTE-> We need a english moderator there, coz i can't do all the things at same time.
That will help me...

Greets Gladiator
<-QUOTE}

I am the Gladiator-Scanner Security Forum Board's new English Global Moderator! It's official. They asked me if I was interested and I said, "Yes." Their need is now. I will do my best! :)

[MyNethingyman]

Congratulation Prince_Serendip.


Regards and Respect,

John

[UNICRON]

Good work Prince! I wonder if the pay is as good as it is being an Administrator for www.wilderssecurity.com? ;)

[yodafan]

hey prince,

Congrads with ur new position, u'll be a great moderator.... Good lucky

P.S. Don't work to hard my buddie...take it easy ;)

YODA

[Paul Wilders]

Hi Prince,

Congrats! Go for it - but keep paying us a visit, will you ;)

regards.

paul

[snapdragin]

Prince - Congratulations!! :D....and from the many posts i saw at Gladiator's Forum, it looks like you are going to be busy very soon!

i am sure though, that you will be able to keep up there, and still visit us here! (or we will have to come and find you and drag you back) ;)

best wishes!

snap

[DrSeltsam]

>Andreas, if you are so smart, why you didn't program this?

No intention. Implementing special unpacking modules is a waste of time i think. I try to emulate files ;o).

>You did only bundle a original UPX.EXE file to unpack this.

Why not? Its quite fast. And - what do you think - how many upx packed files has a home user on his pc? And don't mix something - YAW uses upx.exe - ANTS didn't use it ;o).

[Tinribs]

Well done Prince! I'm made up for you :)

[Vampirefo]

Hi, Paul
Yes I am interested in this project, cause a lot of people ask for a free Trojan scanner, They can't afford to buy one, and the free ones as you know are rare, and not to good.

I was waiting with high hopes on ANTS 3 but it appears, its not to be. This is a good Project so far, very early stages.

[MyNethingyman]

Hi Adreas,
I am wondering if it is possible you and I can be friends. I do not know you and I am a nobody. All my life I have respect for all people even though I have a sharp tongue.
I can see you are hurt and want other to feel your pain.
I respect you.. think you work hard..now asking you to respect yourself and all of us...helping when you can.


Be Well,
John

[Mr.Blaze]

This aplication kicked $%% in al my days i never saw anything so cool in an interface and it was wicked fast and no problems on install.

and all my other applications get along with it no bugs just smooth

[Prince_Serendip]

:) Hi everyone! I thank you all for your congrats and well-wishes! I am part of the Wilders Family so will always consider this board as Home Plate! I may run to the other bases, but I'll always be coming back.

Thank you, MRBLAZE for your compliments. I'm sure Gladiator appreciates them. It will help others too, who want to try using Gladiator Scanner.

I made a good start there today, met some of the team and got some wrinkles ironed out. It's an interesting board with English and Multilingual Posts. You are all invited to participate! :)

Gladiator's Security Labs (http://www.gladiator-secure.de/forum/)

[Mr.Blaze]

yup i had fun terrorizing gladiator with my million qustions lol

[Gladiator]

LOL @MRBLAZE

it was more fun to me ;D

I like to help other peoples 8)

Gladiator