BUGFAQ.TXT

BUGHUNTER Frequently Asked Questions (FAQs). 

Q: What does BugHunter really detect?
A: Everything listed in NEWPAT,PARTLIST.TXT and thousands more.

Q: Where do you get the names for the listings in NEWPAT.TXT?
A: From various vendors, I submit a suspect file to www.virustotal.com
   and virusscan.jotti.org. Previous versions of BugHunter did not
   contain a description of the individual malware files; this one does.
   The information is stored in buginfo.dat and is subject to modification
   at any time. Eventually all signatures will have a corresponding
   description. For ones which haven't been added yet, you get
   "Full Match!" like the previous versions.
   
Q: Why does BugHunter detect so few compared to others?
A: BugHunter *only* detects executables, and various vb, htm files.
   it doesn't detect registry keys, subkeys, cookies or urls stored
   in your favorites folder. As such, the amount of items BugHunter does
   detect is very small in comparison.

Q: Where can I find the BartPE disc you talk about?
A: http://www.nu2.nu/pebuilder/

Q: How often do you release new signature files?
A: As time allows for the capture and analysis of malware samples.
   Just check the website often. As I find bugs and or add new features
   to the executable, it will be updated as well. New signature releases
   will always involve downloading the BUGHUNXX.ZIP file.
   This assures your using the latest public build executable
   and signature files. Delete your old copy, download and unzip to update.

Q: Can we submit files we believe to be malware?
A: Yes, but please contact me first for specific instructions.

Q: This Bart disc seems complex, can you send it?
A: You will have to acquire the BartDisk yourselves. Due to licensing
   restrictions, I am unable to provide you (..) a copy.

Q: I'm the author of a program that your BugHunter detects and I am not
   at all happy with that because I feel that my program isn't malware.
   How can this be remedied?
A: Send me a sample of the file in question. If it is a false alarm, I will
   remove it from BugHunter with the next pattern update.

Q: I think I found a bug in your program. What should I do?
A: Please contact me. I'll need to know what you were doing at the time
   and I'll need a copy of the bughunt.log file.

Q: Windows says it cannot execute BugHunter. What do I do?
A: This sometimes occurs if you have the BugHunter program placed
   in a folder with a long name. It's recommended to just place Bughunter
   and it's associated files in a directory called \BUGHUNT

Q: I have notepad opening desktop.ini when I start my computer, How do I fix
   this?
A: An easy way is to search for desktop.ini, and delete the ones found under
   documents and settings/usernames/start menu/programs/startup.
   * This problem was corrected in v2.1, Please update your version
   if this is happening to you.

Q: BugHunter has been Checking one file for a very long time now, what's
   the problem?
A: Most likely, the file is partially corrupted. You should schedule a
   chkdsk /f run for your next boot, then run BugHunter again.

Q: BugHunter has spent some time Searching, has it crashed?
A: No. BugHunter will only show files as they are examined, some files
   and entire directories will not meet scanning criteria, so BugHunter
   will report Searching until it finds some that do. The More folders
   you have, the longer Searching is likely to occur.


Q: Windows is saying something about CONFIG.NT and or AUTOEXEC.NT
A: You either don't have them, or they are corrupt. Very simple
   versions can be found in the NTFILES.ZIP file.

Q: I thought of another question for this FAQ, how can it be added?
A: Contact me. :)