safe returner 1.27 release

Discussion in 'other anti-malware software' started by egomoo, Aug 5, 2010.

Thread Status:
Not open for further replies.
  1. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Safe Returner is an awesomely impressive anti-malware tool which aids in the removal of Malware - Trojan Horses, Worms, Adware, Spyware - when standard anti-virus software either fails to detect them or fails to effectively eliminate them.

    It's a non-signature anti-malware tool.

    Home page :http://www.safereturner.com/

    It examines all the system files, the Windows Registry and the programs and files loaded at boot time. The majority of malicious programs (once triggered) load this way.

    https://www.wilderssecurity.com/showthread.php?t=274894

    http://www.kernelmode.info/forum/viewtopic.php?f=11&t=188

    Welcome for test and review

    new feature:

    add against with inline hook to detect user mode rootkit

    eg :Trojan SpyEye samples from

    http://www.kernelmode.info/forum/viewtopic.php?f=16&t=93
     

    Attached Files:

  2. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Egomoo, you really should have the latest version available when downloaded.

    OK, the exe killing rogue Security Tool installed and running before Safe Returner.

    Safe Rurner will not install with the rogue active even when renamed to firefox as the rogue blocks firefox.tmp.

    Kill the rogue and then install Safe Returner then reactivate the rogue.

    Safe Returner gets killed but will run if renamed to firefox then after updating both to the latest version and detections then Safe Returner finds and kills the rogue at reboot.

    One.JPG

    Stool.JPG

    SR.JPG
     
  3. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    please rename as IEXPLORE.EXE to run if an exe killer exists

    thanks for the advice,I see the fact that if you do not use an Rkill.com tool before ,safe returner could not be installed .

    in the removal guide it must download Rkill.com tool first,or my similar tool AntiExeHijack.com to kill them first.
     

    Attached Files:

    • 2222.gif
      2222.gif
      File size:
      28.5 KB
      Views:
      1,228
    Last edited: Aug 5, 2010
  4. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    No need for RKill. I just use a renamed Task Manager to kill these rogues that's copied to My Documents.

    Tested Safe Returner against the rogue "Antivir Solution Pro" and Safe Returner gets killed if renamed to opera, firefox or iexplore so I killed the rogue with my renamed Task Manager.

    After killing the rogue then Safe Returner ran and killed the rogue which was a goner at reboot but the proxy hijacks were still there. Merging the below reg file should fix them up or follow this guide.

    Not being able to run with an exe killing rogue is active is nothing to get uptight about as most security apps are killed unless they are already running.
     
  5. Sadeghi85

    Sadeghi85 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    747
    I get this error:
    safe-returner-error.PNG
     
  6. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Last edited: Aug 7, 2010
  7. Sadeghi85

    Sadeghi85 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    747
    Works without problem, thanks.
     
  8. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    cool scaner;)
     
  9. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    I think I may have been a bit unfair in my previous posts where Safe Returner wouldn't start if an exe killing rogue was active as most other exes are killed as well.

    On further testings Safe Returner performs very good in finding and killing active infections.
     
  10. smith2006

    smith2006 Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    808
    Hello egomoo,

    When will the existing v1.26 user get an auto-update to v1.27? Clicking on "Database Definition Updates" & it indicates that I already have the latest. o_O

    I tried downloading & installing v1.27 over, my licensed copy (giveaway from a blog recently) became an evaluation copy.

    When I input my license code again, it just didn't get accepted.

    At the end, I have to do an image restore.

    Thanks.
     
  11. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Hi,

    1. if you click "Definition Updates" it only check the database but not include the app version.

    2 I'm sorry for that.

    please uninstall it and delete the entir folder at %appdata%/safe returner/

    then if it could not resolve your problem ,please pm me with your email ,I give u another.
     
    Last edited: Aug 8, 2010
  12. smith2006

    smith2006 Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    808
    Hello,

    Thanks for the prompt reply.

    1. If I remember correctly, the version I initially installed was v1.24 or v1.25 & it did update automatically to v1.26 when I clicked "Definition Updates".

    2. Okay I will try that & let you know the outcome.

    Update:

    Sorry, it doesn't work. :(

    After uninstalling, deleting folder at %appdata%/safe returner/ & installing v1.27, my registered became an evaluation copy & it didn't accept my product key. :oops:

    I have sent you a PM.

    Thanks for your help.
     
    Last edited: Aug 8, 2010
  13. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,297
    I refer to my recent PM...even with the new license key I cannot get it to change from evaluation to registered. o_O
     

    Attached Files:

  14. smith2006

    smith2006 Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    808
    same case here. :rolleyes:
     
  15. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    sorry for that bug.

    I have fixed it now.

    please update the app to 1.27.1 version.
     
  16. smith2006

    smith2006 Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    808
    Okay, I can confirm it is no more an issue.

    Thanks egomoo for the top notch support. :thumb:
     
  17. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,297
    I have installed this latest version into a different snapshot. :) See screenshot.

    Presently, I am not in the snapshot in which I had the problem with registration mentioned above... so I will still have to upgrade that one later.
     

    Attached Files:

  18. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    Re: safe returner 1.27.2 release

    1.27.2 fix the bug from the video below

    Safe Returner Review from youtube

    thanks languy99 for the test.

    safe returner 1.27.1 ignore the entry while the name is a CLSID

    e.g.

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    "{3BB33587-7A41-42B7-A67B-B49ED8D6E2A0}"="C:\\Documents and Settings\\Administrator\\Application Data\\aldyag\\zeaw.exe"

    because in normal ,if the name is a CLSID,you should read the file location at

    HKEY_CLASSES_ROOT\CLSID\{xxxxxxxxxxxx}\InprocServer32\

    So safe returner ignore the item while could not read the file path.
     

    Attached Files:

    • 111.gif
      111.gif
      File size:
      22.7 KB
      Views:
      643
    • 112.gif
      112.gif
      File size:
      20.5 KB
      Views:
      649
    Last edited: Aug 17, 2010
  19. smith2006

    smith2006 Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    808
    Re: safe returner 1.27.2 release

    Has it been released to the public?

    I just tried downloading from your site & the copy installed was still 1.27.1.

    One suggestion - is it possible to indicate the version in the installer (so that the user will know whether it is the latest before installing)?

    Thanks.

     
  20. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
  21. wearetheborg

    wearetheborg Registered Member

    Joined:
    Nov 14, 2009
    Posts:
    667
    Looks like Safe Returner is improving...keep it up egomoo:thumb:
    Relentlessly keep improving :thumb: :thumb:
     
  22. egomoo

    egomoo Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    115
    yep.thanks wearetheborg.

    As it do not use on great number of PCs.

    So there is some bugs on server computers,I'm trying my best to fix them.

    Safe Returner will be a good additional malware removal tool especially while oters fail to effectively eliminate them.

    In the next version it will add more anti-rootkit features...
     
  23. wearetheborg

    wearetheborg Registered Member

    Joined:
    Nov 14, 2009
    Posts:
    667
    Waiting for that version :D
     
  24. Boyfriend

    Boyfriend Registered Member

    Joined:
    Jun 7, 2010
    Posts:
    1,070
    Location:
    Pakistan
    Great egomoo [​IMG]

    I am waiting for next build.
     
  25. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,297
    "Getting better all the time"... :D

    It is quick in scanning.:)
     

    Attached Files:

Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.