DOS based Trojan Scanners?

Discussion in 'other anti-trojan software' started by polo, May 18, 2002.

Thread Status:
Not open for further replies.
  1. polo

    polo Guest

    Just wondering since there's DOS based virus scanners such as F-PROT or McAfee for DOS is there similar things for dedicated trojan scanners?

    Did trojan scanners exist in the DOS/Win 3.1x era?
     
  2. Checkout

    Checkout Security Rhinoceros

    Joined:
    Feb 11, 2002
    Posts:
    1,226
    Good questions - I'm also interested in authoratitive replies here.  Just goes to show that, no matter how sophisticated M$ Windows is, is still no more than a DOS upgrade.
     
  3. DrSeltsam

    DrSeltsam Guest

    There is a DOS Version of the IF3 Engine of ANTS 2.0, but no one was interested in. If you want i will make a dos version of IF5 (ANTS 3.0 Engine) :eek:).
     
  4. wizard

    wizard Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    818
    Location:
    Europe - Germany - Duesseldorf
    DiamondCS had also plans for a DOS trojan scanner. I do not know what happend to theses plans.

    wizard
     
  5. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    They'll give opportunity in the meantime to test other's products patiently so when theirs come, we are all really convinced immediately DCS's is best. Spares bunches of comparing questions and we know what to test and look for, people might even have commented and posted wish lists.
     
  6. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Andreas,

    That would be nice indeed! "One-floppy-sized"?

    Regards,

    paul
     
  7. snowman

    snowman Guest

         just a FYI.....an don't expect much cause I am just waking up

          several weeks ago I opened a thread titled (other scanners)   its somewhere around the forums...maybe under software......hey..I"m working that first cup of coffee......

          anyway...there were several DOS scanners at the listed site......most were free.....some detect 30.000 to 37.000 sig's........one even claims to detect "morph"

                                   snowman
     
  8. snowman

    snowman Guest

           Question if I may....I was of the impression that DOS scanners would not work properly on w2k and XP...can someone please advise.....I am on w98 but still would like to know.......thank you.


                            snowman
     
  9. wizard

    wizard Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    818
    Location:
    Europe - Germany - Duesseldorf
    The problem with DOS scanners on Win2k, WinXP is the NTFS filesystem. When using FAT32 filesystem instead there are no problems with DOS scanners. When using NTFS there is a small tool that allows to access NTFS drives read only. It can be downloaded from
    http://www.sysinternals.com . But using FAT32 is still the best solution.

    wizard
     
  10. snowman

    snowman Guest

            Wizard

              thank you for replieing.....appreciated.

                       snowman
     
  11. DrSeltsam

    DrSeltsam Guest

    i think about 50 kb of size for the scanner itself. the problem will be the databases. if i only add the "backdoor", "trojans" and "worms" database, then it will be about 250 kb. with clients and server editors and 0190 dialers and so on about 1.5 MB :eek:).
     
  12. DrSeltsam

    DrSeltsam Guest

    @Jooske:

    Kings can be brought down ;o). I think it would be a very very interesting match - TDS-4 vs. ANTS 3.0 - this summer ;o).
     
  13. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Andreas,

    Guessed so.

    Still looking forward to it.

    Nothing wrong with a healthy competition  ;)

    regards.

    paul  
     
  14. UNICRON

    UNICRON Technical Expert

    Joined:
    Feb 14, 2002
    Posts:
    1,935
    Location:
    Nanaimo BC Canada
    Almost as exciting as Olympic Hockey!

    It would probably be more exciting than olympic hockey if Canada's olympic hockey teams (mens and womens) didn't kick so much @ss.


    Guess that is why the boys earn a collective 250 million/ year workin at their day jobs ;)
     
  15. wizard

    wizard Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    818
    Location:
    Europe - Germany - Duesseldorf
    Time to sort the garbage out. ;) Why is the database that big? This nearly the size of the F-Prot database and the F-Prot database include much more malware signatures.

    wizard
     
  16. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    wizard,

    Let me guess: drop the clients (first) and the dailers - and see what happens  ;).

    regards.

    paul
     
  17. DrSeltsam

    DrSeltsam Guest

    About 70.000 signatures, Wizard :eek:). ANTS 3.0 detects about 200.000 Dialers for example :eek:).

    ANTS 3.0 includes about 10.000 signatures of "real malware" (trojans, worms, backdoors and so on), 5.000 Malware Related Tools, 55.000 dialers and about 50.000 virus signatures :eek:).

    The virus engine isn't dos compatible, so they are only the 70.000 "other" signatures :eek:). I think is i drop the malware related tools and the dialers the dos scanner has a size of about 250 kb :eek:).
     
  18. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    I am really exciting about upcoming ANTS 3.0! Can't wait to get my hands on it!!!  :cool:

    Still DOS version would be nice to have. Just in case !

    Technodrome
     
  19. DrSeltsam

    DrSeltsam Guest

    Rokop is prepaering a new test. He will also test the ANTS 3.0 engine. Just by the way ;o). I am very interesting to see the results.
     
  20. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Decided to let the world know after all, Andreas?  :D

    Looking forward to the results as well.

    regards.

    paul
     
Thread Status:
Not open for further replies.