ANTS 3.0 Update Thread

ok ...

cause many many people ask i decided to create a special thread ;o). I will try to give a little report daily:
The neural network ANTS uses to detect unknown malware is trained. First tests showed a detectionrate of about 70% about my whole database.

I also started to convert the old databases into the new format. ANTS 3.0 detects at the moment:


7687 backdoors (including clients + server editors)
411 batch worms
403 VCKs
119 flooder
585 irc worms
3381 I-Worms
21 JAVA malware
236 JavaScript malware
114 nuker
6554 trojans
88 trojan downloader
534 trojan dropper
8 trojan notifier
689 vbs malware
199834 dialer
32304 viruses


Release candidate seems to be released at 14.08.2002 ).

See you tomorrow ;o).

 

Excellent work,I'm sure it'll be well worth the wait

 

changed the database format and some parts of the scan routine to improve the detection of binded trojans and backdoors. A few new unpackingmodules for neolite and wwpack are added, too.

 

Thanks Andreas! Much appreciated.

 

"Release candidate seems to be released at 14.08.2002 )."

I am assuming from this post some of the people that signed up to Beta test ANTS 3.0 are allready doing so?

 

Some of them got some parts to test - but nobody got a COMPLETE version.

Adieu, Andreas

 

I signed up for Beta testing quite some time ago but did not receive any reply. Are only selected people allowed to Beta test?

 

All are allowed.

 

Released a beta of the scanner module and a part of the updater today ;o). If someone want them just mail. Perhaps i will do a english translation if more than 10 people are interested ;o).

The scanner beta includes file and memory scanning ).

 

Thank you,
I would like to participate. I have sent an email. I am an English speaking person- so you can add me to the list.

 

You allready know I want to try it out.. Please send !!!!!!!!!!!
Thank You

 

Andreas - If you have parts of it that are ready-to-go, why hasn't it already been automatically sent to the people who requested to take part in the beta-test? (I was on that list, too, BTW).

spy1@comporium.net Pete

 

you described to a test of the COMPLETE ants 3.0 professional package (rc 1).

quote:
Ja, ich möchte mich unverbindlich zum kostenlosen ANTS 3.0 Release Candidate 1 und ANTS 3.0 lite Betatest anmelden.

"Yes, i want to take part on the free ANTS 3.0 Release Candidate 1 test"

)

I will translate both - the updater and the scanner and send you a link ;o).

 

Thanks! Looking forward to it! Pete

 

Hi just ran a scan on a XP home and also on XP pro system with the Beta scan of ANTS3 and found this C:\WINDOWS\system32\netsetup.exe - Found: I-Worm.Lynder
C:\WINDOWS\system32\wextract.exe - Found: I-Worm.Lynder. Looks like a false reading. Does any one know this Worm? I have not removed them since TDS3 and Wormguard3 and NOD32 find no problems. Just thought I'd let others know . I know it's beta so it's just for testing looks good to me.

 

I uploaded a wrong database - sorry. Just delete the IF5 file and run the update again ;o).

 

Hi,
That was not a complaint. Will you be able to select more than one drive to be scanned. Oh thanks for the fast reply

 

Its not complete. Its only a beta of the engine ;o).

The complete scan module with heuristics and unpacking and virus scanner will be released as a beta soon (and yes, you can choose more then one drive/folder).

 

Too Cool can't wait

 

Hi just re-scanned with new update no problems now. Also I scanned a Win2000 server system i'm running all clean and scan worked perfect .

 

Gee, Andreas, it's nice to know that some people got part part of the program to play with....(My email must not be working - I'll check it right away! <g> ). Pete

 

Pete,

Check out this thread for the engine and update.

http://www.wilderssecurity.com/showthread.php?t=2668

Regards,
Kent

 

Okay, got mine, too (finally got caught up!), and, after some initial weirdness (I didn't get the 'if5scan.dll' file the first go-around, for some reason, plus I had to dump the existing if5 file in the 'Signaturen' folder and re-d/l that since the first one gave me all the bad hits, too), I got a clean scan in five minutes flat that checked 21,846 files on 'C' and 'D' drive (had to scan them separately).

That's actually kind of low on the file count, though. The Cleaner checked 31,658 last time and Tauscan checked 83,806 (supposedly). I did have 'Scan the process memory' checked - would it have checked more or less if I hadn't checked it? Pete

 

I still have not received a copy of Ants Beta 3.0...Am I doing something wrong?? It has been some time now. How do I obtain this program??

 

Hi Litph,
The link for the scanner is two posts above yours just download and try it. also at the start of this thread is the link.