RunScanner : needs beta testers

Hi guys,

This may seem like a great first spam post

But I'm looking for beta testers for my new freeware anti-malware software
http://www.runscanner.net

It is stil in beta and is supposed to become a "superior" version of hijackthis/autoruns (and much more)

All the help and advice of security professionals is welcome.

 

Hi,

Thanks for posting here.

Download your product and give it a try

Regards,

MaB69

 

Take note, that it's still in beta (but working nice already)

 

What features will RunScanner have to make it superior to Hijackthis/Autoruns?

 

I'm trying to combine the "strong" things of both

- Scanning of 73 startup/hijack items. (I'm trying to get them all, more to come)
73 Is already more than both programs
- Verification of file signatures and whitelisting (combination of the "strong" things of both programs)
- MD5 hash calculation of files. (and is a later version online lookup of the result)
- Import / export of .run files. (very userfriendly for people that want to help you with your "malware problems"
... (read the website)

 

Very nice
Thanks for the answer.

 

All suggestions for improvement are welcome, it is supposed to help people.

 

Comparing logs? Useful for integrity checking/security benchmarking.

 

What exactly do you understand by "comparing logs"?

 

A feature which allows to compare two logs taken on different moments and see what´s changed.
This can be done using external tools, but would be nice to have it built-in.
Hope it´s clear now.

 

Good idea (but not for version 1.0)
I'll add it to my todo list for 1.5

 

Great
Also, see if this document is helpful to you.

 

More lists for possible scanned items

http://gladiator-antivirus.com/forum/index.php?showtopic=24610
http://www.silentrunners.org/sr_launchpoints.html

 

My todo list keeps getting longer
Thanks

 

Hello!!

I have downloaded Runscanner...is working fine here!!!

 

Same here: Like the additional registry locations paragraphs.

 

Running fine here.

Like the lookup online feature for extra info.

 

Quite like this app.Using about 13.5 meg after ther the scan.

One queery.Processess on the first tab show two instances of "generic host process for Win 32 Services" and if I go to the "kill process" tab they don't show.

Taskmanager and my Firewall show no "generic host process" as I have the DNS service disabled.

Probably your app is using them to run maybe and not showing in the kill tab?

 

Have you tried :
- Refresh the processes list (check if you see the svchost)
- Do the scan
- Refresh the processes list (check if you see the svchost)

The wintrust verify is probably using the svchost.

 

OK rerun the tests without the MD5 checksums and the two generic hosts still show up in the Auto Runs tab but not the kill process tab even after refresh.

Tried to kill explorer.exe and Firefox but no go.

No probs killing those processess through XP's taskmanager.

 

I found the problem, I changed something in the current version without testing.
Should be fixed in the next build.

 

OK,will post anything further over at your forum as I should have done in the first place.

Sorry Wilders.

 

Meanwhile, I've uploaded a new version which should solve all your problems (and more )

Changelog 0.8.0.0
- Check to see if user has administrator rights
- Fixed bug with corrupt drivers and services
- Added : lookup at google.com to maingrid
- Added icons to the popup menu
- Added "first run privacy blablabla " form
- Layout changes to show more entries on the screen.
- Process killer : Start explorer (if all your explorers are killed)
- Kill process popup menu added
- - Kill and rename of process
- - Kill and delete of process
- - Delete at next reboot of process file
- - Copy to clipboard
- - Open location
- - Show file properties
- - Lookup at Google
- Marking of items (space, doubleclick, popupmenu)
(a user can save the .run file, an expert can mark the items that need fixing and send the .run file back to the user)

New items:
000 General info:
Runscanner Version
Time of scan
Type of scan (full, quick)
Productname
Service Pack
Version Build
Language
Internet explorer version
Windir

 

Very nice, running fine here

 

Running very well here. Developing nicely!