Printable View
Hello all, I was wondering if anyone could suggest a good
trojan scanner to check for trojans and keyloggers?
I know i can search google, but was interested in the opinions
of those that have used such programs, and found which of these
is thourough in its operation.
Thanks for all info and suggestions. TidaLphasE23.
I like using this site for online scanning: http://www.alken.nl/online-security-check.htm
The Cleaner http://moosoft.com
Always search Google before you post. At least you admit to your laziness and your need for others to do the footwork for you. Good going.Quote:
I know i can search google, but was interested in the opinions
of those that have used such programs, and found which of these
is thourough in its operation.
Hi Tidal!
You really ought to have AdAware6.0 from lavasoft, and SpyBot search & destroy. You will have to Google cos I am too drunk/lazy right now :) They are free for private use...and they work!
You can get a 30 day trial of "Pest Patrol", that is a product that is more bot/trojan directed than your standard AV
You might like to check out http://www.diamondcs.au ? They have a couple of good commercial products, and some nice free security stuff.
Cheers
Edit: BTW Master Sergeant "when the whole World is at peace, a wise man walks with his sword at his side"................same source :)
let's not forget Tauscan >http://www.agnitum.com (the cleaner and Tauscan are the tops in my book)
their outpost firewall is good too.. (although sygate is used on most of my boxes)
and yeah they do offer 30 day trials
Drunk On Duvel,
Did you really read my post? I asked for opinions on which programs people have used and which ones they found to work well. I cant see how that is being lazy or asking you to do the footwork for me, I just wanted your opinion on this, thanks anyways.Quote:
Always search Google before you post.At least you admit to your laziness and your need for others to do the footwork for you.Good going.
nihil, I have AdAware.6 and SpyBot search & destroy and use these often. I read an article on
Antispyware Software and in it they tested
AdAware6
Aladdin Internet Cleanup 3
Aluria Spyware Eliminator 3
InfoWorks Technology SpyRemover 1.30B
InfoWorks Technology Spystopper 4.5
McAfee QuickClean 3
PestPatrol Home Edition
Spybot-Search & Destroy 1.2
The highest rating programs didn't trap the key logger or failed to clean all it detected. With these test bench results, how can you be certain that your system has been cleaned completely?Quote:
None of the products cleaned our system completely, even after several tries. More disturbingly, some of them reported the system being completely clean when this wasn't the case.
Thanks for your replies. TidaLphasE23
which keylogger were they using in their tests ?
I really haven't investigated what agnitum means when they say tauscan..
but why don't you grab that keylogger they used and try it out against tauscan.Quote:
Examines every application that you launch to make sure you're not sending private information to unauthorized people.
(and let us know)
Hi Tidal,
Good to hear that you have the basics, and use them! Sorry to tell you this mate, but welcome to reality :(
The bad guys will always be one jump ahead of your standard software, free or otherwise.
You have to build a layered defence, that they don't have time to break?
All your security measures will do is buy you time...just like your car?
Cheers
To add to what has been said.. none will be 100%, and the best will only be 99.9% for a short while....
You have spybot S&D it will help with some common ones..
The Claener and Tauscan are good but not free (you didn't mention cost)
others to try include TFAK (trojan First Aid Kit) was ok last time I checked
Not much help .. sry.. But you will find that in some installation profiles some software will work better than in other profiles.. (installation profile is the Hardware software installation combination for a system).. This will affect any AV and even Trojan Scanners....
Cheers
Concerned Paranoid.....
That is me in a cyber nutshell. I am extremely careful, run spybot all the time, have active x filtering, email scanning, popup blockers, on access file scanning, software and hardware based firewalls the works, yadda yadda. So I still managed to get Cydor installed the other day?? I added Pest Patrol to my collection lately. So far in my opinion, it's a great compliment to spybot. It' like a quick graphical version of netstat.
Hi Tidal,
I have had a few further thoughts.
http://www.spywareinfo.com/~merijn/index.html
This guy has a couple of products "HijackThis" and "Startup List" They don't actually clean anything, but are good at showing what is on your machine. Could be useful in detecting new threats that have not been included in the more traditional detection softwares reference files?
Also http://www.javacoolsoftware.com or http://www.wilderssecurity.net
You are looking for "spywareblaster" and "spywareguard" These have a "PROACTIVE" approach: as in stop it before it even gets there, as such they complement other tools.
A more traditional antispyware tool is SwatIT v2.1 http://www.swatit.org I have seeen it find things that the others did not. It also puts more control into the hands of the User.
I am afraid that none of them are perfect at any point in time, and it does not surprise me that the keylogger was missed. They are actually hard to detect unless your firewall catches them trying to "phone home"
I agree with Und3ertak3r's comment on your personal computer configuration having an effect on the efficiency of these programs.
Good luck
Thanks for the links nihil, very helpfull. I have downloaded a couple of the programs
and will hopefully be at least a little more protected.
sumdumguy, in their tests they used Family Keylogger, considering these most of these
programs failed to trap the keylogger, is there an easy way to search manually for these,
and where would you start searching?
Thanks all for responding, much appreciated. TidaLphasE23. :)
well.. if you got yourself a tool to monitor all the processes running you might see a reference to something unknown.. but even if you did kill the process and even found the executable and got rid of that.. it doesn't mean that it couldn't just restart itself..
(not a dig here but) i guess if you're going to get paranoid enough about keyloggers you might want to spend some money and try this product.. (it does have a trial)
you'll find Anti-keylogger™ Corporate Edition here :Quote:
Anti-keylogger™ Corporate Edition for Microsoft® Windows® is the FIRST product of its kind in the world that can provide every computer with strong protection against most of unauthorized activity monitoring software, both KNOWN and UNKNOWN.
Anti-keylogger™ Corporate Edition is a program designed to combat against various types of intrusion and monitoring programs currently in use or presently being developed worldwide. Unlike the typical approach, it does not rely on pattern-matching, so it can work on new or unknown types of monitoring programs.
Our application is the result of extensive mathematical research and modeling carried out by in-house specialists. They are based on operating principles common to all types of activity monitoring programs running under full range of Microsoft® Windows® operating systems. Our application includes powerful intellectual analyzer, which allows to detect and deactivate all keystroke monitoring programs probably running on your system.
http://www.anti-keyloggers.com/products.html
edit: forgot two more trojan scanners that should be added to the list.
and..Quote:
Trojan Defense Suite 3 (TDS3) is the follow-up from TDS2. This is an anti-trojan from another level, leaving Tauscan and The Cleaner way behind. Because of the awesome numbers of features, this program is not recommendable for beginners, unless one takes time and effort to read and study the - big - help file. Unlike conventional scan/detection software, TDS3 does attack trojans from all angles. If you want to have a look at an example from the 16 (!) ways in which TDS3 can detect a trojan, have a look over here. The main features:
Advanced Intelligent Generic Identification engines for detecting unknown trojans;
high-speed/precision anti-trojan engine for known trojans and worms;
advanced specialist extensions to automaticly perform precise tasks during
certain circumstances, f.e. decryption of a trojan server;
high-speed memory scanning;
high-speed live process scanning;
auto-start Explorer, Registry Monitoring and viewing;
programmable SS3 scripts can control events in TDS and perform thousands of
tasks in the script language of your choice (default VBScript, JScript);
sockets, forms and common controls allows creating powerfull scripts easily;
execution protection will scan before executing, preventing infection;
TCP Traffic Bridging (transparent "middleman" data-piping);
automatic transparent checking/updating;
memory object analysis tools;
network tools (TCP Connect, UDP Broadcast, TCP Port Scan, Local UDP/TCP
Port Scan, IP Range Scan);
Advanced Whois lookup;
Speech synthesis;
Process Viewer, displaying full location/filename of running processes and their
modules;
CRC32 File Integrity Testing monitors "any" important Windows system .exe/dll
files;
ASCII string stripper for closer file analysis;
time-stamped events, with support for Internet Time;
update (radius) whenever needed, even daily;
port reference query;
remote trojan detection tools;
LAN awareness;
ICMP functions (ping, trace);
DNS <> IP two-way resolution;
configurable to your needs and wishes
database approx. 9,300+ trojans, 7,800+ variants,1 0,500+ traces;
new in v3.2.1:
updated Port Reference database and TOTD file;
updated registration utility and text;
user submitted scripts, Andreas Wagner's Screx included;
improved TCP Listen utility;
right-click "scan with" contents menu items added;
improved install/uninstall routines;
minor bug fixes
note: v3.2.1 still shows up as v3.2.0 (engine has not changed).
We consider TDS the most advanced and one of best anti-trojan around. But again: it does need knowledge to handle it.If you don't need the extra options from start, TDS-3 can be run "out-of-the-box", providing full protection. Be sure to enable execution protection. We recommend studying the help files though, and using TDS3.
read about them here > http://www.wilders.org/anti_trojans.htmQuote:
BOClean has a quite different approach from all other programs to deal with trojans.
Any (covered) trojan horse will be automaticly detected and deleted within 10 seconds
of its execution (using standard manufacturer's configuration). This should be well in
time it takes to find your system and acces it, so no information is ever likely to leave
your system without your knowing. The major features:
Destroy trojans and remove registry entries;
Delete all traces of a trojan without the need of rebooting;
Disconnect the threat without disconnecting you;
option tp generate a report and safe copy for evidence;
automaticly sweep and detect in the background;
protects itself from trojans tampering or shutdown;
build-in protection against killing capacaties from malware;
database approx. 2,200 trojans (plus approx. 13,000+ variants);
built-in (scheduled) updater;
excluder;
free weekly updates;
new version v4.11
TDS3 -- top of the heap.. >> http://www.anti-trojan-software-reviews.com/index.htm
Quote:
A survey of the best anti-trojan programs
from Tech Support Alert
Most folk harbor the belief that they are totally protected from malicious trojan horses by their anti-virus scanner.
The bad news is that many anti-virus scanners give only limited protection against trojans. For the best protection against a trojan you really need a specialist anti-trojan program in addition to your anti-virus software.
At Tech Support Alert we identified 42 currently available trojan remover programs. After a lot of culling and testing we ended up with only 6 recommended products and these are listed below. To see how we reviewed, click here. These reviews were originally carried out in mid 2002 but were totally redone in August 2003.
All these products listed below, offer good protection against trojans and have powerful trojan removal capabilities. All would make valuable adjuncts to your anti-virus program and firewall in providing your PC with maximum protection against a hostile attack.
We've made recommendations on the products that impressed us most, but we suggest you read the reviews and make your own decision. Without doubt, the best product is the one that best suits YOUR needs.
Last updated September, 2003
Outstanding Anti-trojan Programs
TDS-3 Editors Choice: Best for experienced users
If you want the highest level of protection against trojans that is currently available, then you need TDS-3. However be prepared to pay for its extraordinary level of security in terms of product complexity and resource usage. TDS-3 is a reassuring product for experienced users but a daunting one for many others.
Trojan Hunter Editors Choice: Best for most users
Trojan Hunter's sophisticated multifaceted detection capabilities allow it to detect insidious modern trojans with an ease that is only bettered by TDS-3. Unlike TDS-3, it has an excellent user interface which means that it can be used even by inexperienced users. Add to that the fact that it's fast, technically sophisticated and is very well supported and you have a winning combination. "TDS-3 without the angst."
G'day sumdumguy, Thanks for the links and your advice, I downloaded TDS-3
trial version, and will be spending some time learning how to use it properly.
I scanned my computer and had no infections at all based on the June database.
The problem i have is manually updating the new database.
It says to[QUOTE];I cant seem to locate any reference at all to TDS directory anywhere. Any help with thisQuote:
(Right click and choose Save Target As) Save the download radius.td3 file to your TDS directory over-writing the existing radius.td3.
would be appreciated greatly, thanks TidaLphasE23.
I haven't been there but will take a look now and get back to you in a few.
edit : I guess i didn't really need to see the site as what you are asking is "where the hell is the TDS directory on my hard drive"
ok.. just download the file first.. doesn't matter where you download it to.
I'm assuming that you've installed the main program.. and the default for most
program locations is under the "program files" directory..
but.. how about you try this..
do a start/find/files or folders.. and in the search box put in Radius.td3
this file will be the default file that was in the program when you installed it.
once you've seen the file.. move the tabs at the top of the search to expand the directory path.. then once you know where that file is.. just copy the NEW file into that same place and windows will prompt you.. "do you want to overwrite this file with...etc"
and that should do it..
also, TDS does have a support forum..
http://www.diamondcs.com.au/forum/
so.. as I've never tried this program.. I would be most curious about it's ability to find keyloggers.. so if you would.. why don't you find/download (but not install) a few keyloggers to test it with.. and then report back your findings.. I would appreciate that a lot.. and so would others here..
ei i'll suggest the cleaner bye moosoft www.moosoft.com ive tried using that soffy at it works try it
Well the way it is is that you should try AVG6.0 it is free and you can get it from www.grisoft.com... I had downloaded the free version and have used it for awhile and found that it works great compared to others for which I will not mention out of respect for what they are trying to do. Also this program is as any other but since it is free it does not have all the bells and whistles BUT, I repeat But it will find those sneaky Bast**d Trojans.
Well I guess My post may have failed try using AVG 6.0 it is free and you can optain it from www.grisoft.com
this is a good av program I have discovered it a while ago and have used it often and it works but being a free program it does not contain all the bells and whistles but will get rid of those TROJANS