PCAudit question

Discussion in 'LnS English Forum' started by SimonW, Feb 22, 2004.

Thread Status:
Not open for further replies.
  1. SimonW

    SimonW Registered Member

    Joined:
    Feb 22, 2004
    Posts:
    115
    Location:
    Leicester, UK
    Hi,
    Can someone please explain to a beginner, why LnS fails to catch PCAudit? I'm using the 2.05 beta and have the enhanced ruleset loaded. I have enabled DLL detection in the advanced optoins.
    My usage up to now has been to allow applications that I know need access to the web (obviously IE being the main one). Is this why PCAudit gets through - because IE is a 'trusted' application?

    Thanks for your help...
     
  2. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    Hey SimonW

    You in reference to pcAudit v2 right?
     
  3. SimonW

    SimonW Registered Member

    Joined:
    Feb 22, 2004
    Posts:
    115
    Location:
    Leicester, UK
    No - just the standard PCAudit :(
    - I understand that no firewall can stop PCAudit2...
     
  4. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    Hey SimonW

    Hmmm Look ā€˜nā€™ Stop v2.05b1 sees the pcAudit v3.0.0.3 .DLL and successfully blocks it, pcAudit v3.0.0.3 fails on my System with Windows XP.
     

    Attached Files:

  5. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    With LNS 2.05 beta1, just enable the DLL components control.
     
  6. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    "* I have enabled DLL detection in the advanced optoins. *" ;)
     
  7. SimonW

    SimonW Registered Member

    Joined:
    Feb 22, 2004
    Posts:
    115
    Location:
    Leicester, UK
    Thanks for your help - I've realised my problem :oops:

    All these sites
    http://www.hot4down.com/21/software_3002-2144-9034374.htm
    http://www.lencom.com/desc/indexN16919.html
    http://download.com.com/3001-2144-9034374.html

    refer to the file to be downloaded as PCAudit v1.0

    and to a newcomer like myself I didn't realise that what is actually being downloaded was v2.0...

    this site
    http://www.pestpatrol.com/pestinfo/p/pcaudit.asp

    clearly shows screenshots of each version. The app itself doesn't clearly identify a difference, and it was only when checking file versions from Phant0m 's post that I guessed something was wrong

    And, when I run this, LnS does identify the process correctly.

    Once again, thanks for the help...
     
  8. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
  9. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    If you want correct leaktests names, may be you can take a look to my website ;) (in the sig).
     
  10. SimonW

    SimonW Registered Member

    Joined:
    Feb 22, 2004
    Posts:
    115
    Location:
    Leicester, UK
    gkweb -
    Excellent site - test info is very useful.

    If only I'd checked your site first... :)
     
  11. Kevin_b_er

    Kevin_b_er Registered Member

    Joined:
    Dec 1, 2002
    Posts:
    13
    Ok, I take back whatever I'd previously said

    The thing is crafty pos.

    I had task manger, the program to trap my keyboards specialty buttons, and winrar try to connect to the internet.

    Its a nasty form of DLL Injection which LnS isn't trapping....
     
Thread Status:
Not open for further replies.