TrojanHunter V5.5.1002 Available. Licenses 50% Discount during Holiday Sale

Discussion in 'other anti-trojan software' started by siliconman01, Dec 12, 2011.

Thread Status:
Not open for further replies.
  1. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    780
    Location:
    West Virginia (USA)
    http://www.misec.net/forum/board/TrojanHunter/1322802713

    http://www.misec.net/forum/board/TrojanHunter/1323686662

    http://www.trojanhunter.com/trojanhunter/
     
  2. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    So much for the partially free Cloud version.
     
  3. Magnus Mischel

    Magnus Mischel Security Expert

    Joined:
    Oct 24, 2002
    Posts:
    185
    Fear not, there will still be a free TrojanHunter Cloud. Things have been hectic around here so it has been delayed, but we're working on it.
     
  4. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,949
    Magnus nice to here from you it's been a while. Glad to hear that TH Cloud is still on.
     
  5. jjc225

    jjc225 Registered Member

    Joined:
    Nov 25, 2010
    Posts:
    224
    I recently downloaded a free trial of Trojanhunter, and liked it so much I got the family license for up to four computers for half price. I tell you, I like this software a lot. I ran three full scans on my three computers and it found in total nine items, none false positives.

    I have a question, though. Exactly what does Trojanhunter Guard do? And what does it mean, on the option, to "unload" it? Does this mean simply to disable it?
     
  6. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    It is the real-time part of TrojanHunter.

    Yes, it means that you disable the real-time part of TrojanHunter.
     
  7. jjc225

    jjc225 Registered Member

    Joined:
    Nov 25, 2010
    Posts:
    224
    Thanks, I figured that's what unload meant. This is really a solid product. I had been pestered for a long time by an HP image monitoring file that kept trying to load at start up, and Trojanhunter identified it as a trojan and I was happy to have it quarantined. I had tried to disable it in the past and it kept coming back.
     
  8. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Hi,

    To make sure that it wasn't a false positive by accident, please follow these guide-lines at the TrojanHunter forum:

    http://www.misec.net/forum/board/FalsePositives/1293005096

    which points to

    http://www.misec.net/forum/board/FAQ/1211189968

    Among other things, it will ask you to submit the file (and it will tell you how to do that), and to start a thread about it at the TrojanHunter forum (please!).
    Please keep in mind that it is Holiday Season ;)
     
  9. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    For some kind of reason lately there seems to be a "discrepancy" between the US- and EU-update-servers used by TrojanHunter, for example related to the files
    TrojanHunter.exe
    Gen.dll


    I don't know why.
     
    Last edited: Jan 13, 2012
  10. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,011
    Location:
    Ontario, Canada
    Same here! o_O

    TH
     
  11. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Hi Daniel,

    Thanks.
    There are also some postings about it at the TH-forum. Siliconman01 is doing everything he can to get in contact with Magnus. It is kind of puzzling what is happening.....
     
  12. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,127
    Location:
    USA
    I reinstalled and will only update from the U.S. server to avoid problems.
     
  13. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,011
    Location:
    Ontario, Canada
  14. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Hi G1111,

    May I ask what the MD5 checksum is of your setup file TrojanHunterSetup.exe ?
    Mine is:
    The file TrojanHunterSetup.exe has the following Checksum(s)
    MD5 - 95389E731B6660134EC93C4F0385BCDB
    It was signed on 06 Dec 2011.

    ---

    Magnus needs most definitely to make public explanations about what is happening with the EU vs. the US server. It is his company and he needs to get on the boards (he does not even answer questions on his own board) to make things clear.

    For now Siliconman01 is advising to use the EU server one time and then to go back to the US server.

    Nobody knows whether the EU or the US server gives the right files; only Magnus can tell.

    O, and Magnus: when important files are changed, their version/build number needs to be changed. :isay:
     
  15. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,127
    Location:
    USA
    TH v5.5 1002
    Size 4153112
    MD5 74ee9512262e997631b81110b2329ceb
    12/6/2011
    downloaded from -http://www.trojanhunter.com/
     
  16. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Hi G1111,

    Forgive me for asking:

    Are you not confusing the setup file TrojanHunterSetup.exe with the file TrojanHunter.exe ?

    Let's please start with the setup-file (which I was asking for), from there we can go on with other files. (and BTW there is still a possibility that re-compiling by Magnus may change checksums; but that is another issue...).
     
  17. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,011
    Location:
    Ontario, Canada
    Here is mine: MD5 118694649146906A1115D73894B96A9C o_O TrojanHunterSetup.exe

    TH
     
  18. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,011
    Location:
    Ontario, Canada
    I just downloaded a fresh copy: MD5 - 95389E731B6660134EC93C4F0385BCDB

    TH
     
  19. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Hi Dan,

    Not sure from when that one was; sorry.

    Yep, that is the current setup file.
     
  20. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,011
    Location:
    Ontario, Canada
    Dec 2nd 2011

    Daniel ;)
     
  21. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,127
    Location:
    USA
    Okay sorry. THSetup.exe
    Size 46165200
    MD5 95389e731b6660134ec93c4f0385bcdb
     
  22. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    OK ;)
     
  23. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Let's start from scratch.

    1.

    Again a clean install with setup-file downloaded on 13 Jan 2012 (on XP-home SP3)
    The file TrojanHunterSetup.exe has the following Checksum(s)
    MD5 - 95389E731B6660134EC93C4F0385BCDB
    signed 06 Dec 2011

    Some files:

    The file C:\Program Files\TrojanHunter 5.5\TrojanHunter.exe has the following Checksum(s)
    MD5 - 74EE9512262E997631B81110B2329CEB
    signed 06 Dec 2011
    size 4.153.112 bytes
    size on disk 4.153.344 bytes

    The file C:\Program Files\TrojanHunter 5.5\RuleFiles\Gen.dll has the following Checksum(s)
    MD5 - EC9F078919BF27FD8D3ECEA803A35AAB
    date 06 Dec 2011
    size 215.040 bytes
    size on disk 217.088 bytes

    The file C:\Program Files\TrojanHunter 5.5\UnUpx.dll has the following Checksum(s)
    MD5 - 28EDB2BE2ACA0749625B31FD1D70C20B
    date 06 Dec 2011
    size 126.123 bytes
    size on disk 126.976 bytes

    2.

    Run update using the US server to get:

    Ruleset datestamp : 2012-01-13
    Scan kernel : 5.0 (Aurelius)
    Ruleset entries : 495918
    Trojan definitions : 117955
    Detection rules : 495918

    The above files TrojanHunter.exe , Gen.dll , UnUpx.dll are not changed.

    3.

    Now use the EU server to run for updates.

    It is still:
    Ruleset datestamp : 2012-01-13
    Scan kernel : 5.0 (Aurelius)
    Ruleset entries : 495918
    Trojan definitions : 117955
    Detection rules : 495918

    But look:

    The file C:\Program Files\TrojanHunter 5.5\TrojanHunter.exe has the following Checksum(s)
    MD5 - D87AC59F29F714CFC4CD28EA71C881CA
    signed 10 Dec 2011
    size 4.153.112 bytes
    size on disk 4.153.344 bytes

    The file C:\Program Files\TrojanHunter 5.5\RuleFiles\Gen.dll has the following Checksum(s)
    MD5 - 8A2CD4FC1E0AFB77E41716CD6923C450
    date 14 Jan 2012
    size 214.528 bytes
    size on disk 217.088 bytes

    The file C:\Program Files\TrojanHunter 5.5\UnUpx.dll has the following Checksum(s)
    MD5 - 28EDB2BE2ACA0749625B31FD1D70C20B
    date 14 Jan 2012
    size 126.123 bytes
    size on disk 126.976 bytes

    4.

    And then use the US server (as default update server) again to check for updates:

    It is still:
    Ruleset datestamp : 2012-01-13
    Scan kernel : 5.0 (Aurelius)
    Ruleset entries : 495918
    Trojan definitions : 117955
    Detection rules : 495918

    The file C:\Program Files\TrojanHunter 5.5\TrojanHunter.exe has the following Checksum(s)
    MD5 - D87AC59F29F714CFC4CD28EA71C881CA

    The file C:\Program Files\TrojanHunter 5.5\RuleFiles\Gen.dll has the following Checksum(s)
    MD5 - 8A2CD4FC1E0AFB77E41716CD6923C450

    The file C:\Program Files\TrojanHunter 5.5\UnUpx.dll has the following Checksum(s)
    MD5 - 28EDB2BE2ACA0749625B31FD1D70C20B


    The above files TrojanHunter.exe , Gen.dll , UnUpx.dll are not changed.

    5.
    Conclusions/questions:

    5.1
    The EU and US servers seem to give other files TrojanHunter.exe , Gen.dll .
    Is this only a compiling issue, or is there more happening?
    Several postings at the TH-forum and advices there indicate that there is more happening than a compiling issue.

    5.2
    It looks like UnUpx.dll has been updated somewhere lately.

    5.3
    We need Magnus to explain things.
     
  24. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,011
    Location:
    Ontario, Canada
    The updating is really screwy when you go to both servers one after another! :blink:

    TH
     
  25. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Maybe in the end it is only a glitch. I know that I sounded a bit too hard. Let's hope that Magnus find the time to look at it and tell us about it. In the meanwhile Gavin is doing a super job with adding lots of detections :thumb:
     
Thread Status:
Not open for further replies.