Wormblaster!! A new antimalware!!

[sg09]

It has been released on softpedia on 9th Aug. Developed by 15 year old guy... I have installed the software and found many system fixup tools in it. It may not have a good signature database as expected but may be something good expected in future. It is in beta now.
http://wormblaster.net/index.php

Screenshots
http://www.softpedia.com/progScreens...ot-166319.html

[jmonge]

is it a scaner?

[sg09]

Originally Posted by jmonge

is it a scaner?

Yes it has a scanner... And has other tools too please see the screenies.

[jmonge]

thanks

[Boyfriend]

The program is currently new with very few signatures. Generic tools and optimization tweaks are built-in. It uses CyberXpert/Cryogen (author of Wormblaster) created scripts to remove some well-known (ITW) malwares. Author is 15 years old only and should be appreciated and welcomed in the field of computer security. I think if he gets sincere help from security experts, he can shine his Wormblaster project.

[sg09]

I have invited the Author to come and comment here. Lets see...

[Cudni]

Not so sure about scanner and massacre button title

[jmonge]

i am running it nowi like the registry tweaks and the home page lock

[sg09]

Originally Posted by Cudni

Not so sure about scanner and massacre button title

Lol.. it is actually the scanner option...

[jmonge]

this may be a terminator

[sg09]

Originally Posted by jmonge

i am running it nowi like the registry tweaks and the home page lock

Yes a nice proactive aadon to any security setup. Are u running the realtime shield?

[sg09]

Originally Posted by jmonge

this may be a terminator

y?

[jmonge]

it is rich ot such tools and names i am testing already againts a rouge
and delete it's processes very easilly

[sg09]

Was it a exe-killer rogue? I guess that will kill it.

[jmonge]

sort of

[dw426]

How is the help file with this? There are quite a few Windows tweaks there that may need some explaining/warning. I might get rid of the "Massacre" terminology, but other than that the interface looks pretty good and clean. I don't have a suitable test system, so I'll let the boys and girls here play with this new toy and keep an eye out for their experiences. I wish this guy good luck, you can never have too many out there helping us in the fight against malware.

[ALiasEX]

10/42 false positives at VirusTotal. Sent the file to Symantec 14 hours ago and they have removed the WS.Reputation.1 detection (now 9/42).

I'll look at it later.

[SweX]

So what about the other 9 vendors FP's

[Ibrad]

Could you please share the MD5?

[ALiasEX]

I was about to reply to SweX with it.
42955f3e54823b6b8d12100731f16602

[SweX]

Thank you

[sg09]

Some confusion is here. The one I downloaded is this
hxxp://wormblaster.net/Virus_Remover_Update.zip
The extracted exe is this

File: WormBlaster Setup ™.exe
CRC-32: 87c7d860
MD4: 794e0d34109aaccea3dc9978a766f128
MD5: 0b99f20a1179180d7cfb34333e874eff
SHA-1: 4631128b86fc288de35629958905b4df6864b309

and VT scan result 0/ 42 (0.0%)
I guess ALiasEX was talking about this one
hxxp://4shared.com/file/67128829/63e396c8/WormBlaster.html
This one is v1.4 beta while the first link gives v2.

[datarishik]

I went for the download but could not connect to the site as it is listed in my hosts file. I think the file is hosted in a suspicious domain(4shared.com-online storage webspace) as it is listed in http://www.malwaredomains.com/wordpress/?p=1136.

[sg09]

AFAIK 4shared is a harmless file server. All the files there were scanned with Kaspersky according to them. Usually such blacklists occur because such file sharing websites remain involved in illegal content sharing.
Anyway the file that it there in 4shared is a old beta version. You can download it from here
http://www.softpedia.com/progDownloa...ad-166319.html

[ALiasEX]

Yes, I was (in a hurry and) very confused.

I saw "Malware Protector (New!)" and "WormBlaster Antivirus" and since the thread is about WormBlaster downloaded the latter. Both are linked to on the homepage (twice).