Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other anti-trojan software
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old June 17th, 2005, 09:47 PM
jonnypop jonnypop is offline
Infrequent Poster
 
Join Date: Jun 2005
Posts: 16
Default trojan test

just wanted to thank everyone for the great info found here which helped me to pick out best virus/trojan software (kapersky,boclean,tds)

I know it is only one sample, but the following pic is an (in the wild) test on jotti

my own scan of the file is as follows

tds - trojan
trojanhunter - nothing found
boclean - trojan (love that single file scan trick)
ewido (free) - nothing found
Attached Images
 

Last edited by ronjor : June 18th, 2005 at 06:45 AM. Reason: Resize image
  #2  
Old June 18th, 2005, 03:10 AM
-.-.-
 
Posts: n/a
Default Re: trojan test

Did you execute the sample? (Otherwise the test is not valid.)
  #3  
Old June 18th, 2005, 04:51 AM
Vikorr Vikorr is offline
Frequent Poster
 
Join Date: May 2005
Posts: 662
Default Re: trojan test

True, a number of AT tests show that most AT's total detection rate depends on a combination of both real time and file scanning.

Ie what a AT may not pick up as a filescan it may pick up when the trojan is executed.
  #4  
Old June 18th, 2005, 06:42 AM
peter.ewido's Avatar
peter.ewido peter.ewido is offline
former ewido team
 
Join Date: Nov 2003
Location: Brno, Czech Republic
Posts: 737
Default Re: trojan test

It's not detected by ewido because it's a Wise Installer which we currently cannot unpack. Once executed the dropped trojan is detected without any problems. Also comparing free to paid versions is really fair...
Attached Images
 
  #5  
Old June 18th, 2005, 11:10 AM
JRCATES's Avatar
JRCATES JRCATES is offline
Very Frequent Poster
 
Join Date: Apr 2005
Location: USA
Posts: 1,192
Default Re: trojan test

Quote:
Originally Posted by fish25
It's not detected by ewido because it's a Wise Installer which we currently cannot unpack. Once executed the dropped trojan is detected without any problems. Also comparing free to paid versions is really fair...

What's the difference between the ewido free and pay as far as the detection rate/engine/etc. goes? I would think the pay offers real-time protection and automatic updates, but that the scanning engine and detection rate would still be the same for both......
  #6  
Old June 18th, 2005, 01:13 PM
peter.ewido's Avatar
peter.ewido peter.ewido is offline
former ewido team
 
Join Date: Nov 2003
Location: Brno, Czech Republic
Posts: 737
Default Re: trojan test

None... The difference is how the nasty gets detected. If the on demand scan fails (e.g. it fails when a trojan is hidden inside a setup like in this case) the guard catches it once it gets dropped and tries to start.
 

Wilders Security Forums > Security Products > other anti-trojan software « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 05:41 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums