Hey give us straight answer

Discussion in 'Trojan Defence Suite' started by Mr.Blaze, Oct 8, 2004.

Thread Status:
Not open for further replies.
  1. Mr.Blaze

    Mr.Blaze The Newbie Welcome Wagon

    Joined:
    Feb 3, 2003
    Posts:
    2,842
    Location:
    on the sofa
    :doubt: I went to find that thread about TDS3 doesn't detect Spector Pro 5 thread

    seems to me like you dodgeing the topic and running around the subject bottom line do you or dont you detect Spector Pro 5 a simple yes or no will sulfice no deep explanation no blah blah just a yes or a no

    if its no its because no ones submited it and i can understand that

    so yes or no thx in advance :rolleyes:
     
  2. It's quite pathetic really. I remember reading one of the moderators giving us an excuse like "oh the companies could extort us if we were forced to buy the software!" or they send you to buy process guard. Hey this is a trojan of the worst kind and you guys dont cover it? THATS SHAMEFULL

    I AM PAYING DAMN GOOD MONEY FOR THIS SOFTWARE AND I WANT TO BE PROTECTED! YOU HEAR ME I WANT MY MONIES WORTH!

    How can they not protect us from trojans such as this... These are trojans of the worst kind and they are not covering us!
     
  3. This is a quote from the thread below from one of the moderators: Phili

    It does a whole lot more than simply catch trojans eh? Unless those trojans cost us a few bucks to buy so we can cover the thousands of customers we have but we wont purchase it because they may "extort" us
     
  4. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    This thread will continue if and only if no more threats are made. The question has been asked by Blaze and we will now await a response.
     
  5. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Blaze, i think you got very straight answers in the other threads?
    Send your copy to Gavin and he'll make sure it's detected if it wasn't already.
    You've been told if you install a commercial software .... etc.
    https://www.wilderssecurity.com/showthread.php?t=47446&highlight=Spector Pro 5
    https://www.wilderssecurity.com/showthread.php?t=47782&highlight=Spector Pro 5

    BTW: did you examen your TDS Primary list lately? Very much worth the trouble to answer your question.
    Now try a next full system scan with your fully updated radius.
    Have fun! :cool:

    You're right: TDS is a shamefull good product for which you paid shamefull little money, even far less then for your shamefull commercial spector which btw is not the worst trojan ever, just a commercial keylogger.
     
    Last edited: Oct 9, 2004
  6. Mr.Blaze

    Mr.Blaze The Newbie Welcome Wagon

    Joined:
    Feb 3, 2003
    Posts:
    2,842
    Location:
    on the sofa
    UNhAPPY CUSTOMER AHHHHH HH why people turn my threads into things like that gasssp

    i was being seriouse

    this qustion was mainly for my small brain

    i just wanted a yes or a no not a why

    i know why payed malware trojans and comerchial spyware exsits

    i know AT and AV companys dont cover comerchial trojans because it be like handing over millions of dollers to teorist of cyberspace duhhhhhhhhhhhhhh

    every scripting mofo hacker slash scripter slash programer would be comeing out with comerchial malware and trojans and we have to give into there demands

    but i just wanted a yes or a no damn

    is that really to much

    i wasnt going to get upset about it i just wanted to know for my owen type thing

    plus tds is a good product so what if it dont capture what a lousey 15 comerchial trojans either the goverment uses or fortune 5000 companys use or your spouse wants to know if your cheating on them sounds more like a personal problem for them thinking you are.

    bottom line i wouldnt give up my tds

    plus the trojans i should wory about are the ones in the wild

    not the ones some boss puts on my computer to see if im surfing porn on company time lol

    but man was a yes or no to hard to follow

    i got small brain ill go look at those threads but i think ill just end up with alot of hightechblahhhhhh lol brb
     
  7. Mr.Blaze

    Mr.Blaze The Newbie Welcome Wagon

    Joined:
    Feb 3, 2003
    Posts:
    2,842
    Location:
    on the sofa
    i am now more confused and wondering about avast and snoopfree are those good products?

    were you trying to sales pitch me on something else cause it working lol

    got my cureiosty going now lol
     
  8. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi Blazie, Here is a screenie of the TDS3 primary list :)

    HTH Pilli
     

    Attached Files:

  9. Mr.Blaze

    Mr.Blaze The Newbie Welcome Wagon

    Joined:
    Feb 3, 2003
    Posts:
    2,842
    Location:
    on the sofa
    :D lol now that says it all thank you normaly i dont do this to guys but lol smoooooooooooochhhhhhhhhhhhh
     
  10. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    :oops: Help Jooske!! :D.......
     
  11. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Blaze your answers are confusing i did answer your question very clear, gave older related discussion threads, told you to look in the primaries list of which Pilli even produced a clear screenshot, so what more do you want?
    Think you should also hug Wayne for making TDS the nicest program and Gavin for adding detection what you asked for, so make it a hug party or something like that.
    BTW: Hope babysitting that little belly dancer mouse is not too much of a burdon to you in that avatar? (i do like it!)
     
  12. kwesi

    kwesi Registered Member

    Joined:
    May 18, 2004
    Posts:
    82
    Location:
    London
    Thanks to Jooske for info and to Pilli, for that screenshot.

    Frankly, I'm amazed (but gratified) that TDS-3 bothers with commercial keyloggers, as this seems to be an area which specialists like Spycop are muscling in on.

    Well done to the DCS dudes, who, as I can tell from reading in these forums, don't ask for uncritical devotion ('twould be fruitless, anyway!), and who in my opinion, put a very creditable amount of effort into product development.
     
  13. Starrob

    Starrob Registered Member

    Joined:
    Apr 14, 2004
    Posts:
    493

    Wayne closed a earlier thread where this subject was discussed. The detection was added because someone who had bought the program had submitted the program to DCS.

    After reading Wayne's answers and really taking a look at the malware scene, I came to the conclusion that there are much worse things out there than Spector.

    If someone really wants into a computer, they are more likely going to do it with very hard to detect trojans and rootkits. I recently came across something on the internet that claimed to have found a way past Kaspersky real-time scanner. Here is what the website said:

    "New Generation of Process Stopping and Frw Disabling for IT Secuirty Testing Purposes!
    It supersedes kav real time monitor and discovers a vulnerability in there, because before
    the realtime monitor prevents execution it is already executed and started disabling."

    I found that on a blackhat site. If I had a choice, I would prefer DCS adding definitions for things like that and worse than I would having them wasting time trying to add commercial keyloggers to the definitions that are unlikely to be put on your computer unless you allow someone with physical access to log on to your computer as administrator

    So to be safe from Spector it is simple by just making sure you you dont give people physical access to your computer with administration rights.

    There are many anti-keylogger programs that do a better job if trying to find commercial keyloggers is a real concern.



    Starrob
     
  14. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Detection and protection for far worse things are in the primaries.
    And did you have a proper look at ProcessGuard already and try it? designed especially for what you described.
    We've a whole interesting support forum for that!
     
  15. Starrob

    Starrob Registered Member

    Joined:
    Apr 14, 2004
    Posts:
    493

    I already have ProcessGuard. I already consider that more important than any scanner because all scanners can be beaten.



    Starrob
     
  16. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    Starrob if you have a copy of the files relating to that exploit you say about in post 13 please send them zipped with a short note to submit@diamondcs.com.au and I'm sure that they will be very interested to add detection and hopefully a block to it
     
  17. Starrob

    Starrob Registered Member

    Joined:
    Apr 14, 2004
    Posts:
    493
    Dear Derek,


    Already done. See your private message.


    Sincerely,



    Starrob
     
  18. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    Thanks
     
  19. rerun2

    rerun2 Registered Member

    Joined:
    Aug 27, 2003
    Posts:
    338
    I am rather mixed on the subject myself. It is very clear to see why trojans and rootkits should be concentrated more. But if you think about it, most anti trojan developers like DCS are very familiar with the people who write certain trojans, and when the trojan authors develop a new version, they are on it pretty quick. But I have also seen some instances where blackhats are simply encrypting and packing programs like radmin. And this makes sense if commercial remote access tools are not of a high priority for AT programs. And if dedicated anti keylogging programs can not deal with encrypted or packed versions of remote access tools. If these remote access tools are being used by blackhats in this way, it is no longer about someone with physical access and administrative rights, it poses just as large a threat as any other RAT.

    Did you submit the file to KAV as well? :)
    Would be interested to their reply if they send you one.
     
    Last edited: Oct 9, 2004
  20. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi rerun2, I hope that was a typo :) Anti Tojan is what I hope you meant :D

    Cheers. Pilli
     
  21. rerun2

    rerun2 Registered Member

    Joined:
    Aug 27, 2003
    Posts:
    338
    heh heh yes thank you, corrected :blink:
     
  22. Mr.Blaze

    Mr.Blaze The Newbie Welcome Wagon

    Joined:
    Feb 3, 2003
    Posts:
    2,842
    Location:
    on the sofa
    omg my post dissapered lol

    will anyways hug smoochhhh all dcs team thx jooskey
     
  23. Starrob

    Starrob Registered Member

    Joined:
    Apr 14, 2004
    Posts:
    493
    I sent a pm to Igor on KAV board and he did not respond. They do most likely know about it and have fixed it, though. I know that the recently came out with a new build but they don't say anything about fixing that vulnerability in the new build but I am fairly sure they quietly added a definition for it.

    I have read enough things on the internet to know that KAV real time monitor does have weaknesses. Yes, the real time monitor will stop almost everything that is out there BUT someone with the know how can design special things that can get by the real time monitor if they are specifically targeting KAV.

    This is why I also use a Anti-Trojan in addition to TDS-3 that has a resident real time monitor. TDS-3 currently does not have a real-time resident monitor. The execution protection is not a real-time monitor. TDS-4 will more likely than not have a very advanced real-time monitor.


    Starrob
     
  24. Mr.Blaze

    Mr.Blaze The Newbie Welcome Wagon

    Joined:
    Feb 3, 2003
    Posts:
    2,842
    Location:
    on the sofa
    :mad: ok that not funny where are my posts disapearing to i ythink i posted 3 times and when i come back they gone o_O is this place hunted
     
  25. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Nobody knows what is in TDS-4. But remember there will be the ActiveGuard, the very advanced resident protection we all look forward to.
     
Thread Status:
Not open for further replies.