Tauscan & polymorphic....where did I put my hat, I will eat it later!

Discussion in 'other anti-trojan software' started by ChrisP, Dec 22, 2003.

Thread Status:
Not open for further replies.
  1. ChrisP

    ChrisP Suspended Member

    Joined:
    Jun 6, 2003
    Posts:
    447
    Location:
    UK
    I sent Agnitum an email asking why they did not add Donald Dick 1.44 & 55 to the latest update - as I had emailed the trojans to them ages ago.

    This was the reply.

    Thank you for email. Trojan analysts informed us that they had
    received your email with trojans. Also they said that they know about
    these trojans about 2 years.

    They were not added to the Tauscan database because current engine
    doesn't allow to add polymorphic Trojans.

    Currently the developers test new version of Tauscan, it should fix
    most known problems and implement database engine.

    Please await the release of new version to see how it works and
    detects Trojans.

    We strongly recommend that you join the Agnitum News mailing list at
    http://www.agnitum.com/news/ to keep informed of security issues that
    may affect you, and of new version release.

    best regards,
    Lenny
    Agnitum Support Team
    www.agnitum.com/support/
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Well done - it's recommended to submit nasties to all AT/AV companies ;)

    Indeed Agnitum knows these for quite some time.

    ...and that's very old news, discussed over on this board repeatedly.

    I for one am sure looking forward to the Final Release - and wish Agnitum all the best in succeeding in their efforts.

    No offense, but that doesn't sound as good advice to me. While waiting those using the current Tauscan version are "rather" vulnerable. While awaiting this new release, Tauscan users are advized to - at least for the time being - use an antitrojan that is capable of handling these kind of nasties.

    regards.

    paul
     
  3. ChrisP

    ChrisP Suspended Member

    Joined:
    Jun 6, 2003
    Posts:
    447
    Location:
    UK
    My main point was - that i was wrong about the "Smollymorphic" business.

    I have now removed tauscan from my system.

    Im assuming that my F-secure 5.41 can detect polymorphic trojans?

    I notice however that Pestpartol lists .55 in its database - would I be right in assuming it detects all but a polymorphic server?
     
  4. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    I did too, some time ago, it never updated correctly anyway. :mad: I rely upon BoClean now and I will add TDS once I get a new system with XP that has the resources to handle both. :)

    Acadia
     
  5. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Those things do happen - join the club ;)

    For the record: I for one am not bashing Agnitum/Tauscan. I really do wish they'll come up with a fine reliable new version.

    It's a matter of view: personally, I've always believed layered defense is the way to go. F-Secure is no doubt a fine antivirus; nevertheless I would recommend a separate resident running stand alone antitrojan.

    No offense in regard to PP intended - but this software is by no means build to cope in a trustworthy way with trojans/backdoors.

    regards,

    paul
     
Thread Status:
Not open for further replies.