Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other anti-trojan software
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old March 16th, 2002, 01:09 PM
Liquid_Fish Liquid_Fish is offline
Regular Poster
 
Join Date: Feb 2002
Posts: 81
Default Eric Howes Trojan Test 2

Eric has posted a follow up to his orginal test at

http://www.staff.uiuc.edu/~ehowes/trojans/tr-tests-2.htm

This one includes BoClean. *

If you missed the original series of tests you should start at

http://www.staff.uiuc.edu/~ehowes/trojans/tr-tests.htm
  #2  
Old March 16th, 2002, 01:52 PM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,947
Default Re: Eric Howes Trojan Test 2

Well, I must say that I expected BOClean to perform a little better than that.

Although this may not be a comprehensive test, it certainly appears to be serious enough to make me start worrying (a little).

I'd be interested to hear the views of people more qualified than I am to judge these results.
__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #3  
Old March 16th, 2002, 02:23 PM
Liquid_Fish Liquid_Fish is offline
Regular Poster
 
Join Date: Feb 2002
Posts: 81
Default Re: Eric Howes Trojan Test 2

The biggest surprise has got to be Trojan Hunter. *I was under the impression that the Sub 7 trojan ( which these tests used ) is one of the more well known trojans out there. *
  #4  
Old March 16th, 2002, 05:35 PM
Nancy_McAleavey's Avatar
Nancy_McAleavey Nancy_McAleavey is offline
Expert Member
 
Join Date: Feb 2002
Location: Voorheesville, NY, USA
Posts: 244
Default Re: Eric Howes Trojan Test 2

We just put out an update to deal with what failed the test (ASPack
problem), need to figure out where we go from here as far as BOClean goes
to prevent any possibility of a similar outcome... the PROBLEM really is
there is no "real world" test and instead, like comparing virus scanners
on which one finishes a scan fastest (huh?) as a benchmark of quality ...
stay tuned, though it might be later tonight. The flapping of the gums is
a much lower priority at the moment than going over 9,000 trojans to see
if we've missed something else.

Bottom line, it's fixed, and the new update contains the fix.
__________________
KNOS does security. Get back to surf.
  #5  
Old March 16th, 2002, 06:05 PM
Liquid_Fish Liquid_Fish is offline
Regular Poster
 
Join Date: Feb 2002
Posts: 81
Default Re: Eric Howes Trojan Test 2

flap.. flap.. What is with the people on this board all of sudden? *anyway....

I think everyone is very much aware of the fact that these are not "real world" tests. *I know Wayne of Diamond CS has been very vocal about this in the past. *The good thing about these kinds of tests are the problems are discovered & missed trojans are reported to the vendors that develop these products. * These problems get addressed and we are all just a little bit safer in the "real world".
  #6  
Old March 16th, 2002, 06:29 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Technical Expert
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: Eric Howes Trojan Test 2

Quote:
like comparing virus scanners *
on which one finishes a scan fastest (huh?)

All things equal, a faster scanner is a better scanner. I cannot speak for others but I personally prefer faster scanners. If I am waiting for it to finish, I don't have to wait as long.

If you don't undersand why I feel that way I might (and by no means am I accusing you of this) get the idea you don't think my time is valuble to ME. I doubt my time is of any value to you since you don't pay me by the hour to do anything, but others do.

Quote:
The flapping of the gums is *
a much lower priority at the moment than going over 9,000 trojans to see *
if we've missed something else.

I agree with this statement 100%. It does seem like you value you own time just fine.

However, a faster scanner that scans poorly and detects less, is an inferior product. I doubt anyone would argue that (although these days people will argue abiut what they had for breakfast it seems).

Quote:
We just put out an update to deal with what failed the test

I interpret this as an indication that the test was of some value. It has helped you strengthen your product. If I was to harbour a guess, I'd speculate that your customers are pleased you have done this.

No product is perfect and I think it is important to not take it personal when some test (fair or unfair) finds faults in it. You have done a commendable job of fixing the issues quickly. That is sometimes more valuble to a client than anything, since sooner or later a new malware will come out (like D.I.R.T) and you will be one of the first to detect it. I beleive your Sofware and TDS-3 announced detection on the same day, and i have yet to hear if others have.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #7  
Old March 16th, 2002, 06:52 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

These tests smell, Hell I can make a pinto look like a mustang if I wanted to, Anyone that does these test must provide the demo they used Sub7 or what every, I bet the author wont let me have a copy, I can fix it were every scanner will fail to detect it, but of course only the product I like will detect it.

A Trojan can be broken down bite by bite, and ran through a scanner, until the detection string is found change that, and that particular, scanner wont detect the Trojan at all.
  #8  
Old March 16th, 2002, 06:57 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

Yes after I made my post, and read it I realized I should have used bytes instead of bites, I know the spell police will be around and correct any other words.
  #9  
Old March 16th, 2002, 07:12 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Technical Expert
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: Eric Howes Trojan Test 2

Now you attack the integrity of this tester?

Quote:
These tests smell, Hell I can make a pinto look like a mustang if I wanted to, Anyone that does these test must provide the demo they used Sub7 or what every, I bet the author wont let me have a copy, I can fix it were every scanner will fail to detect it, but of course only the product I like will detect it.

By using the term "these" you have directed your entire post at this test and other like it. Unless you have evidence to support this, you are acting the part of a TROLL.

Is it just the outcome that you do not like?

__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #10  
Old March 16th, 2002, 07:16 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

The outcome is predictable, cause this a TDS-3 forum. Now If I go to Tauscan's forum, I predict their tests with show it as the top scanner, and If I go to the cleaner website, I predict their results will show the cleaner as the top.
  #11  
Old March 16th, 2002, 07:22 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

Per your evidence request one only has to visit another vender's site to see different results, Now if every other vender out their, shows TDS-3 as the top scanner, and their own product, can't detect as good as TDS-3, first I ask for a link to these sites, then I will admit I was wrong, now if you can't will you admit you are wrong?
  #12  
Old March 16th, 2002, 07:34 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Technical Expert
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: Eric Howes Trojan Test 2

I don't recall commenting on EVERY test, just this one. You have attacked and slandered the tester.

http://www.dictionary.com/search?q=slander

I would never suggest all tests are fair and unbiased, but I will not condemn a test with no evidence whatsoever.

This is not a TDS forum
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #13  
Old March 16th, 2002, 07:37 PM
Marsman Marsman is offline
Infrequent Poster
 
Join Date: Feb 2002
Posts: 33
Default Re: Eric Howes Trojan Test 2

I was slightly concerned when I read these test results earlier over at Becky’s but having dealt with (Kevin) BOClean’s tech support previously I felt confident that if indeed these tests were valid PSC /BOClean would have a fix in place fairly quickly.

Unlike so many other companies who seem to go into denial or silent running mode when product problems or shortcomings surface, PSC is one company that addresses these type of issues head-on & quickly.

I believe we should complain loud & clear if products are buggy. *Conversely, we should also promote those companies & products that really do the job that they were advertised to or we expected them to do.

Cheers,
Mars Man *

P.S. Liquid_Fish, agree totally with your (Reply#4) post. * *
  #14  
Old March 16th, 2002, 07:50 PM
wizard's Avatar
wizard wizard is offline
Frequent Poster
 
Join Date: Feb 2002
Location: Europe - Germany - Duesseldorf
Posts: 818
Default Re: Eric Howes Trojan Test 2

Quote:
The outcome is predictable, cause this a TDS-3 forum.

This is not a TDS-3 forum! Wilders Security Forums offer parts for TDS-3 support. The rest of this forum is open to all kind of products. This is a service as Becky offers this also to some security tools. So I beleave you would never call Beckys a BOClean forum?

wizard
__________________
wizardRESEARCH - Malware Research & Analysis since 1989
  #15  
Old March 16th, 2002, 07:54 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

Quote:
I don't recall commenting on EVERY test, just this one. You have attacked and slandered the tester.

http://www.dictionary.com/search?q=slander

I would never suggest all tests are fair and unbiased, but I will not condemn a test with no evidence whatsoever.

This is not a TDS forum

I used the word these not this, so there is a difference, These mean tests posted on this forum would favor TDS-3, so I was correct. If I would have use the word this, then that would have meant I was only talking about this one test, but even you noticed which word I chose, So I will except that as you are telling me you were wrong, without using the word wrong, that's ok, I have gotten use to how you all treat people around here.

Please feel free, to check my spelling and grammar, or anything else that would distract, from me being correct, perhaps I use the wrong word somewhere, if so I am sure someone will let me know, in the most hatefulness,rude, manner possible.

  #16  
Old March 16th, 2002, 07:58 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Technical Expert
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: Eric Howes Trojan Test 2

Vampirofo, I am going to ask you a direct question. I have no previous assumptions on this:

Do you work for, work with, benefit from, or have any, professional or otherwise, association with any particular Anti-Trojan company?

A one word answer is all I ask for. I will not assume this is true if you decide not to answer.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #17  
Old March 16th, 2002, 08:01 PM
Liquid_Fish Liquid_Fish is offline
Regular Poster
 
Join Date: Feb 2002
Posts: 81
Default Re: Eric Howes Trojan Test 2

Quote:
These tests smell, Hell I can make a pinto look like a mustang if I wanted to

keep in mind they can also show you the car you thought was a Mustang is really a pinto.
  #18  
Old March 16th, 2002, 08:06 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

Quote:

This is not a TDS-3 forum! Wilders Security Forums offer parts for TDS-3 support. The rest of this forum is open to all kind of products. This is a service as Becky offers this also to some security tools. So I beleave you would never call Beckys a BOClean forum?

wizard

A survey is hosted here for TDS-3, and anyone that objects to the actions of TDS-3, is belittled, by the mods here, this doesn't happen at Becky's, here is a test go to Becky's in the boclean forum, and post you disagree with something they do, you will not find the Mods jumping on you, calling you names cause you used an e instead of o in a word, this is the only forum that does that, cause it a TDS-3 forum.

No will the mods ask you whether or not you have a legal copy, cause that is a privacy issue, you know a need to know thing, this is most defiantly a TDS-3 forum, and it's proven by the actions the mods do, to belittle anyone that disagrees with TDS-3 methods.

Don't worry you support TDS-3, so no one will check your spelling, only those that oppose TDS-3, spelling and grammar will be checked.
  #19  
Old March 16th, 2002, 08:07 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

Quote:

keep in mind they can also show you the car you thought was a Mustang is really a pinto.

Agreed 100%
  #20  
Old March 16th, 2002, 08:08 PM
Liquid_Fish Liquid_Fish is offline
Regular Poster
 
Join Date: Feb 2002
Posts: 81
Default Re: Eric Howes Trojan Test 2

Quote:
Unlike so many other companies who seem to go into denial or silent running mode when product problems or shortcomings surface, PSC is one company that addresses these type of issues head-on & quickly.

This is to be commended!!! *You know Norton & McAfee won't even blink at these tests.

  #21  
Old March 16th, 2002, 08:09 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Technical Expert
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: Eric Howes Trojan Test 2

the post regarding spelling was not made by a mod.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #22  
Old March 16th, 2002, 08:17 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

Quote:
the post regarding spelling was not made by a mod.


Nor was it removed by a Mod, That by itself says a lot about this forum, All negative.
  #23  
Old March 16th, 2002, 08:22 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Technical Expert
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: Eric Howes Trojan Test 2

so why stay here trollin?

PS. I am not a mod of that forum so I can do nothing. I have asked for it to be edited.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #24  
Old March 16th, 2002, 08:26 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

Quote:
so why stay here trollin?

PS. I am not a mod of that forum so I can do nothing. I have asked for it to be edited.

Only some members and Mods are trolling, you are including in the trolling the rest of us, are here to get Wayne to respect privacy, which is laking on this forum.
  #25  
Old March 16th, 2002, 08:42 PM
Vampirefo
 
Posts: n/a
Default Re: Eric Howes Trojan Test 2

Ok and here is proof that this test is BS, Wayne, The author of TDS-3 promoting this test on another forum. http://www.dslreports.com/forum/remark,2682034
 

Wilders Security Forums > Security Products > other anti-trojan software « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 01:25 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums