Charles, The I also use Tauscan to regularly check my PC for the possiblity of trojan infection. I can tell you that I have several trojans I have tested against very popular AV titles such as Panda AV,Mcaffe, nortons, PC-cillin, and Command AV. None, and I repeat, None of them have been able to detect my self configured trojan server .exe's, with one exception being the Command Anti-virus. Command AV found my trojan tainted EXE files while the other AV software passed right over it.
My recomendation is Command AV used in conjunction with Tauscan. There may be a more effective configuration, but this is what I have learned from my personal experiance. Be sure you select the "Advanced trojan analyzer" check box in the config of tauscan. Otherwise It to may miss an encrypted trojan that has been binded with an EXE. Anyhow hope this helps you and some others be safe against the threat of remote exploitation through the use of trojans. In closing I'd like to mention taht when i contacted a few of the above AV manufacturers, and made them aware of the fact that their product was not recognizing the trojans, they requested a copy of my file.. I declined to giving them the code, as i'm quite sure those software companies would never offer me anything in return. regards, Darkbluemoon >From: "Hornat, Charles" <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Trojan Scanners >Date: Fri, 19 Apr 2002 13:19:58 -0400 > >Any recommendations on a Trojan scanner? I currently use Tauscan from >Agnitum. I know there are a thousand or so out there, but I would like to >hear from those who have used and are experienced with trojan scanners. > >In addition to this, is there a real benefit from using a trojan scanner >with an antivirus product like Mcafee or Symantec? Most popular antivirus >vendors today provide notification of trojan infections, so whats the point >of a trojan scanner? > >Thank you, > >Charles > > >________________________________________________________________ >The information contained in this message is intended only for the >recipient, may be privileged and confidential and protected from >disclosure. If the reader of this message is not the intended recipient, or >an employee or agent responsible for delivering this message to the >intended recipient, please be aware that any dissemination or copying of >this communication is strictly prohibited. If you have received this >communication in error, please immediately notify us by replying to the >message and deleting it from your computer. > >Thank you, >Standard & Poor's _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com
