Secure Banking 1.1

Discussion in 'other anti-trojan software' started by Habakuck, Sep 23, 2011.

Thread Status:
Not open for further replies.
  1. Baserk
    Offline

    Baserk Registered Member

    While the v1.1 changelog mentions 'Weniger "False Positives" von Anti-Viren-Programmen' / less FP's by AV progs, a hypothetical site which hypothetically tests files against 40+ hypothetical AV's, still gives a hypothetical 13/44 score.

    The Secure Banking dev asks for help at protecus.de; 'Btw. ich würde mich sehr über mithilfe bei diesem Projekt freuen! ;) (Website/Werbung/Coding)' link.
    He would not only gladly receive help with his website and advertising but also coding.
    And perhaps reporting FP's?
    Last edited: Sep 27, 2011
  2. pintas
    Offline

    pintas Registered Member

    Unfortunately my coding is not what it used to be, but i suppose he could team up with PE Guard. :)
  3. CloneRanger
    Offline

    CloneRanger Registered Member

    Thought i'd try & see what it does ;) Uploaded it 1st to VT

    sb.gif

    SecureBanking - Installer.exe = Result: 0/43 (0.0%)

    SecureBanking.exe = Result: 20/43 (46.5%)

    sbservice.exe = Result: 28/43 (65.1%)

    SecureBanking.dll = Result: 18/43 (41.9%)

    Funny installer ?

    inst.gif

    Wanted out via

    za1.gif

    Also tried to connect to 178.63.25.142 = -www.securebanking.bplaced.net

    za2.gif

    Had to allow several ProcessGuard prompts in German, & i also got a LOT of error messages in German, & ultimately it failed to install ?

    From their www via google.com/translate

    Here's my feedback :thumbd:
  4. Baserk
    Offline

    Baserk Registered Member

    Google Translate algorithm distorts the original text into something extremely fishy.
    A more proper translation would be;
    "Secure banking is an application that can reliably detect different Trojans (Zeus, SpyEye, Carberp, ...) on your system."
    No arguments about whether the prog is valid or not but Google Translate is :thumbd: in this case.
  5. Page42
    Offline

    Page42 Registered Member

    VIPRE doesn't like securebanking...

    secure banking.jpg
    secure banking II.jpg
  6. Page42
    Offline

    Page42 Registered Member

    Hitman Pro context scan says sbservice.exe is malware.
    Looks like WOT had this one right.
  7. Jose_Lisbon
    Offline

    Jose_Lisbon Registered Member

    It usually does.
  8. J_L
    Offline

    J_L Registered Member

    Since it's used quite a lot, there will be many false positives as well.

    Also, AVs aren't perfect either. Has anyone actually analysed the behaviour of this program?
  9. Habakuck
    Offline

    Habakuck Registered Member

    Jep, but i wont comment it in detail as long as the analysis as protecus and TB are running... So far, nothing which was not mentioned by the builder..
  10. Page42
    Offline

    Page42 Registered Member

    False positives and imperfection...
    Two ever-present conditions associated with most security software.
    Anyone who doesn't know this, and account for this, might as well have a blindfold on.
    I view WOT and AVs as indicators.
    Never do I consider either of them to be the last word.
  11. RJK3
    Offline

    RJK3 Registered Member

    Exactly. There is always the possibility for false negatives and false positives.

    From the WOT ratings, I feel the site should be commended for its excellent Child Safety.
  12. Noob
    Offline

    Noob Registered Member

    Yeah, i would like someone to go in deep with the software, but i guess that might be too much to ask :D
  13. SUPERIOR
    Offline

    SUPERIOR Registered Member

    i tested version 1.0 and it failed
    now tested it again with 1.1 and here what i have found :

    first off, three executed files for defending and 2 files for detailed(one for the date of version)
    it starts with injecting securebanking.dll into explore process and runs sbservice for monitoring when wanted processes run for detecting malicious activities
    now it looks for only 2 names of processes to monitor (IE and FF) so google and other browsers are out of this game :D

    then i had to try it in action so i run zeus bot and then run FF IE and SR and u can see the result in attachments

    as long i dont understand german, i can say that it just alarms you if there is trojan but cant help you to defend or to make secure banking as its name claims :blink:

    one more thing, i noticed that there was a connection to server5.bplaced.net but when i did whois i didnt find this server in the list o_O
    PS : i guess it doesnt matter since it just connects for making sure that u have latest version ^^

    Attached Files:

    Last edited: Oct 3, 2011
  14. CloneRanger
    Offline

    CloneRanger Registered Member

    @ Baserk

    Thanks for the translation info :thumb:

    @ SUPERIOR

    Thanks for the extra testing :thumb: Well at least it alarmed you there was a Trojan, which is better than nothing ;) Needs more work by the sound of it.
  15. SUPERIOR
    Offline

    SUPERIOR Registered Member

    @CloneRanger
    your welcome, btw the version u were testing is 1.0 maybe u could give v1.1 another try ;)
  16. CloneRanger
    Offline

    CloneRanger Registered Member

    @ SUPERIOR

    Thanks for the invite, but i think i'll pass ;)
  17. Noob
    Offline

    Noob Registered Member

    Oh well, then it's kinda crappy as of now :)
  18. carat
    Online

    carat Guest

    Why? It's designed to detect banking trojans and that's what it did :)
Thread Status:
Not open for further replies.