PLEASE READ ! Radius file update at 12-July-2004

On last Friday several users here and at the Private board mentioned problems with the Radius update.
I didn't see a reply from Gavin in my thread at the private board, so I'm now posting here.

Today there is still a problem !

Gavin posted today this:

Update for 12-07-2004: +24 references (+24 primaries)

[35749 references - 13992 primaries/9984 traces/11773 variants/other]

After updating I have:

[35477 references - 13720 primaries/9984 traces/11773 variants/other]

 

Re: Radius file update at 12-July-2004

Grab it again from Turvamies, i just got it there and that one is OK

 

Re: Radius file update at 12-July-2004

WARNING to all:

Do not use this update:

http://tds.diamondcs.com.au/radius.td3

 

Re: Radius file update at 12-July-2004

Yep, you're right Jooske:

The Turvamies site has the right one

Here is again the link:


http://radius.turvamies.com/radius.td3

 

Re: Radius file update at 12-July-2004

Would someone confirm if the latest update should be:

(35749) - References (13992) - Primaries (9984) - Traces (11773) - Variants

I downloaded again from Jooske's link but need to make sure the files numbers are correct.

On an XP forum another user started to delete a huge number of finds when he ran TDS over the weekend and now we think he has deleted system files (he is in a panic )

I am afraid to scan until I know these updates are the correct ones - thanks.

 

Re: Radius file update at 12-July-2004

This is the one that worked for me. Or just go to this site and reload the radius.td3 file in the TDS3 Directory

http://radius.turvamies.com/radius.td3

11:39:17 [Init] • Radius Advanced Specialist Extensions on standby for 13 trojan families
11:39:17 [Init] • Systems Initialised [35749 references - 13992 primaries/9984 traces/11773 variants/other]
11:39:17 [Init] Radius Systems loaded. <Databases updated 12-07-2004>
http://radius.turvamies.com/radius.td3

 

Re: Radius file update at 12-July-2004

Robyn, can that user come over here or do you have the link to their thread so we can try to help
Is going back to a former system restore point an option for that user?

TDS has some hidden backups from necessary system files which it puts back itself, but not from all of windows.

 

Re: Radius file update at 12-July-2004

I just downloaded the same as what Ceejay13 showed from the TDS3 radius update link.Is this the correct radius file?

 

Re: Radius file update at 12-July-2004

Hi Jookse

Unfortuately the member is not aat his own computer at the moment as he is at work. He is going to be checking everything tonight when he arrives home and will then possibly post when he sees what he is faced with on boot.

As you can see he is in a bad way and does not know what will happen tonight. he also ran Ad-aware and Spybot but they did not find anything

 

Re: Radius file update at 12-July-2004

System restore if possible i see as only option, as he most probably did not save to text either to indicate what he deleted.
Wonder which two worms on top might have been right, but i wouldn't panic yet. Let us know later!

 

Re: Radius file update at 12-July-2004

Thanks Jooske System restore was the only thing I could think off - will mention about the worms also. I will keep you posted as to what happens when he get home, thanks again.

 

Re: Radius file update at 12-July-2004

System restore if possible - if not can try running SFC for replacing missing files from the Windows original setup, not sure if XP has a protection for that.
The files most probably are no more in the recycle bin or if he is lucky in TDS-3\xDynamic\Unpk -- think not but it could be...........
Required system files TDS will put back itself,
now it is to find those from the Canon (install cd/diskette?) and what he remembers to have deleted.
and send him to these threads here -- this is after all the Official Public TDS forum.

 

Re: Radius file update at 12-July-2004

Ok i have a question about the corrupt file.
if you use the program updater did i download
the 'bad' file?
If so what do i do now?thanks in advance
p.s. just downloaded it 8:08am my time(pacific)

 

Re: Radius file update at 12-July-2004

You will see the total amount of references is not ok, compared to the number on top of the DiamondCS forum and on top of the TDS site, or with a scan you all of a sudden get many strange alerts,
go to another mirror, download manually again
reload TDS
and look if it's better now.
Has happened only incidally before on an occasional mirror, now it's a bit more it seems.

 

Re: Radius file update at 12-July-2004

ok have the file and will check what version?
now dont want to sound stupid??lol
I am running windows 98se..open up the zip
file and add it what part of the directory?
and will it over-write the other corrupted one?
thanks

 

Re: Radius file update at 12-July-2004

heres my updated info
#35477-ref-13720

 

Re: Radius file update at 12-July-2004

It doesn't come zipped, it's immeadiately ready, just download it immediately in your TDS-3 directory it finds it's way.
If you want to be very extra sure rename the existing radius.td3 with an extra extension like *.old so you can always turn back if needed.
Just d/l file in TDS-3, restart TDS and see if it's now right.
Of course you can first look in the TDS-3 directory and look careful at the new file size. Spares time with all the startups etc.
It should be a little bigger then the former one.
From the TDS-3 directory you can press the update.exe to update without having TDS-3 loaded, you might like to automate that with adding it to your tasks scheduler.

 

Re: Radius file update at 12-July-2004

That was the wrong update. You need to look in another mirror -- somebody posted the ....burst at DCS as being ok now.
Sorry for the inconvenience, i'm sure they're investigating it.

 

Re: Radius file update at 12-July-2004

http://radius.turvamies.com/radius.td3
snagged it from here and all is good now!!
thanks for all the great info an help
Jooske!!!

 

Re: Radius file update at 12-July-2004

You're welcome! Happy scanning!

 

Re: Radius file update at 12-July-2004

I'm not necessarily in a panic to get to-day's corrupted update corrected. Downloaded it and concluded with the enormous number of alarms, there had to be a false positive problem with the update.

It is reasonable to assume that Diamonds' will quickly correct this problem. When I download the update from within the TDS update function in the TDS program after Diamonds has corrected the corrupted update issue will the corrupted file I have now downloaded be overwritten. I am assuming yes, but just wanted to be sure.

 

Re: Radius file update at 12-July-2004

I used the server Jooske posted and let the update overwrite the first one I downloaded this morning. I hadn't scanned with the first update but the reference file details were not correct. I have the correct details now and have scanned with a clean result from TDS. I think it would be best to download the correct update just in case.

 

Re: Radius file update at 12-July-2004

Today, I turned on my pc..and my td started telling me I thousands of files infected with a trojan...it just can't be possible.

My system was fine yesterday.

 

Re: Radius file update at 12-July-2004

Robyn,

Thanks for the advice. Downloaded update from site suggested by Jooske and successfully overwrote corrupt update I downloaded this morning.

 

Re: Radius file update at 12-July-2004

Can Imagine that, sorry to hear so.
But please, there are a few things,
At downloading the radius and you see the number is lower then before, there must be something wrong.
Isn't one of the first steps to check the TDS update site to see the rurrent references?
and in the forum, and see if in the forums people have the same experiences?
And maybe emailing support to ask if this is rignt or something is wrong?
Especially with many sudden alerts, some alarms should be ringing for you that this can't be true and does need deeper investigation before deleting anything.


If you have XP, are you able in any way to get back to a former restore point?
Same with win ME.
Maybe in safe mode?
If not, is there an option to do a repair install?
Can you get into safe mode and try to do an SFC with the original windows cd-roms?
Other backups somewhere?
TDS does have copies of several system files, which it replaces in case they got lost, but you'll have your windows running for that, true......

Do you remember which files you deleted?
Hope not all 650 alarms some people got?
You did not save the alerts to the scandump.txt file first before starting the deletion? With that we might be able to help you getting individual files back, from other people's systems.

Are there files left in the tds-3\xDynamic\Unpk which you recognise and could try to put back? (accesssable in DOS too so that shouldn't be a problem if they are there)

Can you boot up with a boot diskette if all other ways fail? (or the install cd-rom maybe)