Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other anti-trojan software
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old May 18th, 2002, 05:01 PM
polo
 
Posts: n/a
Default DOS based Trojan Scanners?

Just wondering since there's DOS based virus scanners such as F-PROT or McAfee for DOS is there similar things for dedicated trojan scanners?

Did trojan scanners exist in the DOS/Win 3.1x era?
  #2  
Old May 18th, 2002, 05:09 PM
Checkout's Avatar
Checkout Checkout is offline
Security Rhinoceros
 
Join Date: Feb 2002
Posts: 1,226
Default Re: DOS based Trojan Scanners?

Good questions - I'm also interested in authoratitive replies here. *Just goes to show that, no matter how sophisticated M$ Windows is, is still no more than a DOS upgrade.
__________________
My Novel
  #3  
Old May 19th, 2002, 09:41 AM
DrSeltsam
 
Posts: n/a
Default Re: DOS based Trojan Scanners?

There is a DOS Version of the IF3 Engine of ANTS 2.0, but no one was interested in. If you want i will make a dos version of IF5 (ANTS 3.0 Engine) :o).
  #4  
Old May 19th, 2002, 09:47 AM
wizard's Avatar
wizard wizard is offline
Frequent Poster
 
Join Date: Feb 2002
Location: Europe - Germany - Duesseldorf
Posts: 818
Default Re: DOS based Trojan Scanners?

DiamondCS had also plans for a DOS trojan scanner. I do not know what happend to theses plans.

wizard
__________________
wizardRESEARCH - Malware Research & Analysis since 1989
  #5  
Old May 19th, 2002, 10:22 AM
Jooske's Avatar
Jooske Jooske is offline
Incredibly Massive Poster
 
Join Date: Feb 2002
Location: Netherlands, EU near the sea
Posts: 9,713
Default Re: DOS based Trojan Scanners?

They'll give opportunity in the meantime to test other's products patiently so when theirs come, we are all really convinced immediately DCS's is best. Spares bunches of comparing questions and we know what to test and look for, people might even have commented and posted wish lists.
__________________
Jooske
"o_o"
  #6  
Old May 19th, 2002, 02:28 PM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,461
Default Re: DOS based Trojan Scanners?

Andreas,

Quote:
If you want i will make a dos version of IF5 (ANTS 3.0 Engine)

That would be nice indeed! "One-floppy-sized"?

Regards,

paul

__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
  #7  
Old May 19th, 2002, 05:03 PM
snowman
 
Posts: n/a
Default Re: DOS based Trojan Scanners?



* * *just a FYI.....an don't expect much cause I am just waking up

* * * several weeks ago I opened a thread titled (other scanners) * its somewhere around the forums...maybe under software......hey..I"m working that first cup of coffee......

* * * anyway...there were several DOS scanners at the listed site......most were free.....some detect 30.000 to 37.000 sig's........one even claims to detect "morph"

* * * * * * * * * * * * * * * *snowman
  #8  
Old May 19th, 2002, 05:09 PM
snowman
 
Posts: n/a
Default Re: DOS based Trojan Scanners?



* * * *Question if I may....I was of the impression that DOS scanners would not work properly on w2k and XP...can someone please advise.....I am on w98 but still would like to know.......thank you.


* * * * * * * * * * * * snowman
  #9  
Old May 20th, 2002, 09:13 AM
wizard's Avatar
wizard wizard is offline
Frequent Poster
 
Join Date: Feb 2002
Location: Europe - Germany - Duesseldorf
Posts: 818
Default Re: DOS based Trojan Scanners?

The problem with DOS scanners on Win2k, WinXP is the NTFS filesystem. When using FAT32 filesystem instead there are no problems with DOS scanners. When using NTFS there is a small tool that allows to access NTFS drives read only. It can be downloaded from
http://www.sysinternals.com . But using FAT32 is still the best solution.

wizard
__________________
wizardRESEARCH - Malware Research & Analysis since 1989
  #10  
Old May 20th, 2002, 12:24 PM
snowman
 
Posts: n/a
Default Re: DOS based Trojan Scanners?



* * * * Wizard

* * * * * thank you for replieing.....appreciated.

* * * * * * * * * *snowman
  #11  
Old May 20th, 2002, 04:46 PM
DrSeltsam
 
Posts: n/a
Default Re: DOS based Trojan Scanners?

i think about 50 kb of size for the scanner itself. the problem will be the databases. if i only add the "backdoor", "trojans" and "worms" database, then it will be about 250 kb. with clients and server editors and 0190 dialers and so on about 1.5 MB :o).

  #12  
Old May 20th, 2002, 04:52 PM
DrSeltsam
 
Posts: n/a
Default Re: DOS based Trojan Scanners?

@Jooske:

Kings can be brought down ;o). I think it would be a very very interesting match - TDS-4 vs. ANTS 3.0 - this summer ;o).
  #13  
Old May 20th, 2002, 06:08 PM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,461
Default Re: DOS based Trojan Scanners?

Andreas,

Quote:
i think about 50 kb of size for the scanner itself. the problem will be the databases.

Guessed so.

Quote:
if i only add the "backdoor", "trojans" and "worms" database, then it will be about 250 kb. with clients and server editors and 0190 dialers and so on about 1.5 MB ).

Still looking forward to it.

Quote:
I think it would be a very very interesting match - TDS-4 vs. ANTS 3.0

Nothing wrong with a healthy competition *

regards.

paul *



__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
  #14  
Old May 20th, 2002, 06:17 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Technical Expert
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: DOS based Trojan Scanners?

Almost as exciting as Olympic Hockey!

It would probably be more exciting than olympic hockey if Canada's olympic hockey teams (mens and womens) didn't kick so much @ss.


Guess that is why the boys earn a collective 250 million/ year workin at their day jobs

__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #15  
Old May 20th, 2002, 07:48 PM
wizard's Avatar
wizard wizard is offline
Frequent Poster
 
Join Date: Feb 2002
Location: Europe - Germany - Duesseldorf
Posts: 818
Default Re: DOS based Trojan Scanners?

Quote:
with clients and server editors and 0190 dialers and so on about 1.5 MB :o).

Time to sort the garbage out. ;) Why is the database that big? This nearly the size of the F-Prot database and the F-Prot database include much more malware signatures.

wizard
__________________
wizardRESEARCH - Malware Research & Analysis since 1989
  #16  
Old May 20th, 2002, 07:54 PM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,461
Default Re: DOS based Trojan Scanners?

wizard,

Quote:
Why is the database that big?

Let me guess: drop the clients (first) and the dailers - and see what happens *.

regards.

paul

__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
  #17  
Old May 20th, 2002, 08:22 PM
DrSeltsam
 
Posts: n/a
Default Re: DOS based Trojan Scanners?

About 70.000 signatures, Wizard :o). ANTS 3.0 detects about 200.000 Dialers for example :o).

ANTS 3.0 includes about 10.000 signatures of "real malware" (trojans, worms, backdoors and so on), 5.000 Malware Related Tools, 55.000 dialers and about 50.000 virus signatures :o).

The virus engine isn't dos compatible, so they are only the 70.000 "other" signatures :o). I think is i drop the malware related tools and the dialers the dos scanner has a size of about 250 kb :o).
  #18  
Old May 22nd, 2002, 10:00 AM
Technodrome's Avatar
Technodrome Technodrome is offline
Global Moderator
 
Join Date: Feb 2002
Location: New York
Posts: 2,140
Default Re: DOS based Trojan Scanners?

I am really exciting about upcoming ANTS 3.0! Can't wait to get my hands on it!!! *

Still DOS version would be nice to have. Just in case !

Technodrome
__________________
Classic Trance Hit: PPK - Resurrection
  #19  
Old May 22nd, 2002, 10:17 AM
DrSeltsam
 
Posts: n/a
Default Re: DOS based Trojan Scanners?

Rokop is prepaering a new test. He will also test the ANTS 3.0 engine. Just by the way ;o). I am very interesting to see the results.
  #20  
Old May 22nd, 2002, 11:33 AM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,461
Default Re: DOS based Trojan Scanners?

Quote:
Rokop is prepaering a new test. He will also test the ANTS 3.0 engine. Just by the way ;o). I am very interesting to see the results.

Decided to let the world know after all, Andreas? *

Looking forward to the results as well.

regards.

paul
__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
 

Wilders Security Forums > Security Products > other anti-trojan software « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 06:59 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums