Results 1 to 10 of 10

Thread: ZA 2010 Fails Tojan Test

  1. #1
    wrhindy Guest

    Question ZA 2010 Fails Tojan Test

    Recently I came upon the following trojan test. It came highly recommended, so I downloaded and ran it. Imagine my surprise when ZA 2010 completely failed to detect both the download and the installation. I know that it installed properly because Spybot S&D did detect it when run in "Paranoid" mode.

    http://www.misec.net/trojansimulator/

    So what's the problem with ZA?

  2. #2
    Join Date
    Aug 2009
    Location
    Texas Gulf Coast
    Posts
    1,653

    Default Re: ZA 2010 Fails Tojan Test

    Quote Originally Posted by wrhindy View Post
    Recently I came upon the following trojan test. It came highly recommended, so I downloaded and ran it. Imagine my surprise when ZA 2010 completely failed to detect both the download and the installation. I know that it installed properly because Spybot S&D did detect it when run in "Paranoid" mode.

    http://www.misec.net/trojansimulator/

    So what's the problem with ZA?
    First question.Are you runnig ZASS 9.1.008.000.

    Under Program Control / Main is it set to Max

    I see from an other post your using ZoneAlarm Internet Security Suite 80_020_000 and Windows XP Home Edition.

    If this is the case your seven version behind 9.1.008.000.Which is current.Not a very true test.

    ZoneAlarm Security Suite version:9.1.008.000
    TrueVector version:9.1.008.000
    Driver version:9.1.008.000
    Anti-virus engine version:8.0.2.42
    Anti-virus signature DAT file version:997505888
    AntiSpam version:6.0.0.2383

    Have a nice Day
    Last edited by Sky Soldiers; November 20th, 2009 at 10:12 PM. Reason: Added ZA version

  3. #3
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,292

    Default Re: ZA 2010 Fails Tojan Test

    ...also simulation may be ingnored by purpose. Never trust tests. They are tests and most of the time developed by antimalware companies to show how good is their software as compared to others

    The only real test is to use the tool in real environment, if you keep your ZA up to date and properly set up you are safe and protected.

    Cheers,
    Fax
    EDIT: You should receive a pop-up from ZA informing you that "trojan simulator" want to set itself to start on your PC. You "deny" and "trojan simulator" will will fail to run. Note that your ZA program control should be set to MAX. Note that ZA free does not contain advanced control systems. Please also note that SpybotS&D can conflict with ZA apart from been weak in protection. There are better free antispyware if you really can't stay only with ZA (that, depending on the version, its perfectly enough)
    Last edited by fax; November 21st, 2009 at 12:03 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  4. #4
    wrhindy Guest

    Unhappy Re: ZA 2010 Fails Tojan Test

    As a matter of fact I am using the latest version of ZA Internet Security Suite, not the free stuff.

    ZoneAlarm Security Suite version:9.1.008.000
    TrueVector version:9.1.008.000
    Driver version:9.1.008.000
    Anti-virus engine version:8.0.2.42
    Anti-virus signature DAT file version:997551584
    AntiSpam version:6.0.0.2383

    Auto-Updated as of 11/21/2009 at 2:45pm.

    Program Control was running in "Learn" mode for the 1st test, and "Maximum" for the second. In "Maximum" mode there was a pop-up window asking if I wanted to install the software, but there was nothing to identify it as potentially damaging.

    The Internet Zone firewall was running in "High" mode, and the download was scanned but not identified as potentially damaging.

    PS: My first computer was a TI-99 with a tape drive. My second was ran DOS 2.0. So I am not exactly a newbie. However my spouse occasionally is an accident waiting to happen, so I need the best possible protection for her laptop.

    I agree that sometimes tests can be biased in favor of a particular vendor. However, several other security programs reportedly DID detect this test either during download or installation. If anyone has a different test to suggest (other than an actual trojan), I will be happy to try it.

  5. #5
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,473

    Default Re: ZA 2010 Fails Tojan Test

    Quote Originally Posted by wrhindy View Post
    As a matter of fact I am using the latest version of ZA Internet Security Suite, not the free stuff.

    ZoneAlarm Security Suite version:9.1.008.000
    TrueVector version:9.1.008.000
    Driver version:9.1.008.000
    Anti-virus engine version:8.0.2.42
    Anti-virus signature DAT file version:997551584
    Anti Spam version:6.0.0.2383

    Auto-Updated as of 11/21/2009 at 2:45pm.

    Program Control was running in "Learn" mode for the 1st test, and "Maximum" for the second. In "Maximum" mode there was a pop-up window asking if I wanted to install the software, but there was nothing to identify it as potentially damaging.

    The Internet Zone firewall was running in "High" mode, and the download was scanned but not identified as potentially damaging.

    PS: My first computer was a TI-99 with a tape drive. My second was ran DOS 2.0. So I am not exactly a newbie. However my spouse occasionally is an accident waiting to happen, so I need the best possible protection for her laptop.

    I agree that sometimes tests can be biased in favor of a particular vendor. However, several other security programs reportedly DID detect this test either during download or installation. If anyone has a different test to suggest (other than an actual trojan), I will be happy to try it.

    I Agree with Guru fax, Most Quality Test available via the INTERNET, are usually Biased and many produce Fake Results to convince you to Buy their product, other Infect your Computer and Hold your Computer Hostage until
    you Buy their Fix program to undo the damage they caused..

    as for computer experience?

    I have dealt with Computers for over 25 years, from Old Test Tube Main frames like a Sperry Univac with an 8 foot long keyboard with 100's of Lit Keys and 1000's of Blinking Light bulbs and Printed Results on half inch Ticker tape, a Control Data PDP-11, an IBM System 3, and a Massive CDC Torus 6400 computer that looked like the HAL 9000 in the movie 2001,

    My first Personal computer was 16k Radio Shack Model I with a Cassette Tape drive that I invested $4,000.00 maxing out with a slow 1,200 Baud acustical Coupled Modem and 48K Ram and two single sided ($500.00 Each) 360K Floppy drives.., then bought the First Model II and Model IV with 5 MB HD.. then fist 10MHz IBM PC with 20MB HDD..
    Last edited by GeorgeV; November 22nd, 2009 at 07:18 AM. Reason: typo
    GeorgeV
    ZoneAlarm® Extreme Security


    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

  6. #6
    bunnyfugger Guest

    Default Re: ZA 2010 Fails Tojan Test

    Sorry for the off-topic post but I'm just glad to have found someone else that worked on the old Sperry Univacs. I worked on an 1110 in the 1980s and it was brilliant!

  7. #7
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,473

    Thumbs up Re: ZA 2010 Fails Tojan Test

    Hey, Nice to meet another Sperry univac user..Now back on Topic
    Last edited by GeorgeV; November 22nd, 2009 at 07:12 AM.
    GeorgeV
    ZoneAlarm® Extreme Security


    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

  8. #8
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,292

    Default Re: ZA 2010 Fails Tojan Test

    Quote Originally Posted by wrhindy View Post
    PS: My first computer was a TI-99 with a tape drive. My second was ran DOS 2.0. So I am not exactly a newbie. However my spouse occasionally is an accident waiting to happen, so I need the best possible protection for her laptop.
    Yes, indeed my first too TI-99 than Sinclair QL and DOS 2.0 or the reverse... can't remember LOL. Sorry, but that is a TEST, there is nothing malicious in the test. ZA can't warn you about something that is not malware.

    When you will be faced by a real malware you will be faced by different warnings

    And if you have to deal with someone with no knowldge of the system than you should have a separate limited account with a password protected ZA. This will limit the damage but not eliminating it. You can't avoid 100% of the malware if the user is not educated about the threads out there.

    Standard test is, for example, this one: http://www.eicar.org/download/eicar.com

    If the above is detected your ZA AV is working as it should and you are protected. Set your AV to update every 30 minutes, your program control to MAX and if you need more protection move up to ZA Extreme.

    Cheers,
    Fax
    Last edited by fax; November 22nd, 2009 at 12:54 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  9. #9
    wrhindy Guest

    Red face Re: ZA 2010 Fails Trojan Test

    Problem solved.

    As it turns out, installation of the updated version of ZA apparently shifted the program back into "Learn" mode. In addition, the ZA browser security toolbar was not active. No toolbar, no browser security apparently. I can't say that I like that arrangement. I think the browser security controls should be part of the main program windows and not dependent on a toolbar. A small rant: I think that browser toolbars are mostly useless space hogs and turn off / remove all but the most essential.

    As it happens, there does not appear to be a way to create/launch a ZA browser security toolbar in the Google Chrome browser. Does that mean that ZA browser security is not compatible with Chrome?

    Anyway, thanks for your responses. Properly configured, ZA does detect all of the EICAR test objects, even the double zipped one. Interestingly enough, so does Windows Defender...

  10. #10
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,473

    Default Re: ZA 2010 Fails Tojan Test

    Feature-specific requirements

    Browser security requirements
    • Microsoft Internet Explorer 6, 7, 8
    • Mozilla Firefox 2.0, 3.0, 3.5
    GeorgeV
    ZoneAlarm® Extreme Security


    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •